The password expires far too frequently for the level of risk - its just an extranet giving access to minimal data, none of which is earth shattering. And I very rarely use it.
I’d have thought a permanent password would have been adequate. I have never understood the value of passwords that expire in 60 or 90 days, its just a ball ache for occasional users and for the admins who have to reset everything every couple of months. I’m not convinced its mitigating any real world worthwhile risks in this case. (correct me if I’m wrong?, I suppose it does save them from having to manually delete users - maybe 6 monthly then?)
The warning emails start weeks before its due to expire. Obviously at that point the message gets marked as non-urgent in my mind. I then continue to ignore all subsequent warnings right up until my account gets frozen.
The messages should probably come from different sources and have different titles to differentiate the informational ‘it will soon be time to change your password’ from the ‘urgent action required - you are about to get locked out’.
The subject line ‘Password expiration warning’ repeated in daily emails I find incredibly easy to ignore.
Anyone with me on this or do you all just think I’m a slacker for not sorting it out?
I managed to get it renewed several days before I was permanently removed for ever. Its not that simple, it requires me to use a different operating systems and a different browser to my usual ones (ie a different physical machine).
Anyone else suffering for over zealous security? (eg trying to take 2 bags on a plane in the UK (in certain airports - in some its still 1 item of hand baggage))
I won’t even talk about the cumbersome password rules, needles to say I’ve written it out on a piece of paper in my top right hand desk draw like everyone else.
cheers
Simon