Weak passwords survey

[papapa909090]

I think we should make survey if weak passwords should be allowed,

IMO strong passwords scare users away and I strongly feel that I am not alone in that view

Thank you for opinions

[coffeecat]

Unless you are referring to the password you use in Ubuntu One SSO, this is not a Forum Feedback & Help topic.

Thread moved to The Cafe.

[bapoumba]

I'm quite surprised. No passwords here, all is handled by the Ubuntu One SSO.
Educate rather than survey, methinks.

[markodd]

Well, I'll use this thread to ask an OFF -Topic question:

Vbulletin seems to be dead (?) and every VBulletin forum I know has been changing to Xenforo. Does ubuntuforums.org plan to do that as well?

[bapoumba]

Not that I know of.

[deadflowr]

Well, what about if weak passwords are allowed and then your password ends up getting cracked?

What then?
I would assume you would advocate the opposite.

[uRock]

I use long passphrases for every account I create, provided a site allows it. If you have a hard time with passwords, then this may be helpful. https://lastpass.com/

[grahammechanical]

Why not a finger print reader? What could be better?

I read a very interesting blog on Planet Ubuntu the other month where it was reasoned that finger prints should not be viewed as passwords but as user names. It was pointed out that we leave our finger prints everywhere. So, they are not a very secure password at that.

The writer won me over.

[uRock]

Why not a finger print reader? What could be better?

I read a very interesting blog on Planet Ubuntu the other month where it was reasoned that finger prints should not be viewed as passwords but as user names. It was pointed out that we leave our finger prints everywhere. So, they are not a very secure password at that.

The writer won me over.

I agree. It is one of the many reasons I wasn't sold when Apple built it into the iPhone.

[bashiergui]

I agree. It is one of the many reasons I wasn't sold when Apple built it into the iPhone.

Apple is using the fingerpring for their NFC electronic wallet now. I think that's a reasonable use of fingerprints. The phone is encrypted when you lock the screen. Passphrase to unlock, fingerprint to activate a credit card. Beats the crap out of the existing US magnetic stripe system.

You can't win with passwords. If you require difficult ones, users complain they can't remember them. You allow easy ones and when users accounts get bruteforced and stolen, users complain your security sucks.