The main reason is that, if IT chooses the user passwords, then the users simply... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

rprospero on March 10, 2017 | parent | context | favorite | on: Password Rules Are Bullshit

The main reason is that, if IT chooses the user passwords, then the users simply forget the password. Thus, the system for resetting a lost password becomes part of the default login process. In which case, you might as well having a password in the first place.

lloeki on March 10, 2017 [–]

> the system for resetting a lost password becomes part of the default login process

So the system could basically fall back to being OTP?

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact