It’s bizarre how despite these recommendations I’ve had multiple workplaces that change passwords monthly. Add stringent complexity requirements, and you get sticky notes everywhere with full logon details.
A sign in button would be about the same level of security.
It’s bizarre how despite these recommendations I’ve had multiple workplaces that change passwords monthly. Add stringent complexity requirements, and you get sticky notes everywhere with full logon details.
A sign in button would be about the same level of security.
Take the sign in button and put it on the user’s phone that requires biometrics/PIN and you’ve probably got a pretty darn secure system.
Risk management > blind security rules. The latter is security theatre.