How often do you change your passwords?

SGT Ben Keen — Fri, 16 Oct 2015 10:06:55 -0400

The other day, I got an alert from Google that my personal email had some "specious log in attempts". As an IT professional, I understand the importance of the maintaining security of your online passwords so as soon as I saw that email, I took action. I changed all my passwords on my different email accounts, my social media sites and most importantly my bank account online.

When I went through the process of changing the passwords, some sites showed me the last time I changed them. I was scared to see how loose I been and that some of my passwords haven't changed in over 365 days. At work, we are required to change our log on passwords every 60 days so to see some of my personal log ins having been out there for over 365 days was scary.

This got me thinking though, how often do we change our passwords? Do you change the passwords you use fairly often or are you like me and only change when something spikes your attention? I also made a change from trying to think of phrases and dates I could remember to using a password generator app on my phone that "secures" them with a master password and comes up with some crazy passwords for me to use. Does anyone else use something like this or are you still using a name or date you easily remember?

Response by LTC Stephen F. made Oct 16 at 2015 10:08 AM

LTC Stephen F. — Fri, 16 Oct 2015 10:08:35 -0400

I have 50 or more passwords which have different requirements SGT Ben Keen. Many especially those related to the military are required to be changed every 90 or 180 days.
Financial passwords and medical office passwords tend to be changed at other intervals.

Response by SGT Private RallyPoint Member made Oct 16 at 2015 10:09 AM

SGT Private RallyPoint Member — Fri, 16 Oct 2015 10:09:33 -0400

Every once in a while.

Response by Maj Chris Nelson made Oct 16 at 2015 10:23 AM

Maj Chris Nelson — Fri, 16 Oct 2015 10:23:14 -0400

I seldom change. I have changed them....so never isn't quite right....but I do not go out of my way to change them on a schedule.....

Response by PO1 Private RallyPoint Member made Oct 16 at 2015 11:47 AM

PO1 Private RallyPoint Member — Fri, 16 Oct 2015 11:47:44 -0400

SGT Ben Keen Only when forced to. I also use a master password but typically I use some off the wall combinations that really are quite meaningless to anyone but me. I call it my "Hood Code". First you have to break the "Hood Code" to cipher the passwords, then figure out which passwords go with which accounts (which also are in code). So I worry not. :)

Response by PO3 Steven Sherrill made Oct 16 at 2015 12:00 PM

PO3 Steven Sherrill — Fri, 16 Oct 2015 12:00:43 -0400

SGT Ben Keen that information is classified? I change them randomly. If I see I haven't changed one in a while, I will do so just because it is good practice.

As an aside to this, we have a person in our office who is responsible for making sure that our sensitive information is in good order who asks the question "Why do we need passwords on our computers in the office?" Talk about bringing the brain to a screeching halt.

Response by SPC Private RallyPoint Member made Oct 16 at 2015 12:39 PM

SPC Private RallyPoint Member — Fri, 16 Oct 2015 12:39:41 -0400

With all the passwords I have they are all derivatives of a master... I figure I am safe if it takes ME 20 minutes to figure out how to get back on my computer after I haven't used it in awhile

Response by SSG Private RallyPoint Member made Oct 16 at 2015 12:41 PM

SSG Private RallyPoint Member — Fri, 16 Oct 2015 12:41:26 -0400

I won't say exactly how often I change my passwords. That would provide an opportunity to exploit a vulnerability. :D

For real though, between all the various systems, tools, databases, and accounts I use, I have a ledger with over 65 unique passwords. I keep it safe. The passwords do get changed frequently, so I have to keep it written somewhere or I'll forget them.

Some that I am less concerned with don't get changed as often, but anything that accesses sensitive information, PII, finances, or anything of a personal nature for me or my Soldiers is changed very frequently.