Changing your password every 90 days AT ALL. Drives me nuts.
While we are at it, ridiculous expectations for passwords.
"Your password must contain:
* 8-14 characters, no more, no less
* at least one upper case letter
* at least one lower case letter
* at least one number
* at least one special character
* cannot contain any of these special characters: !@#$%^&:;,<>?/{]}{
* must contain the initials of at least one of the original mouseketeers
* cannot contain the abbreviation of any state
* cannot spell out a word
* cannot have any 2 numbers in sequence
* cannot repeat any characters
* must contain at least one 3-digit prime number
* cannot repeat any of your previous 78 passwords, or any part of them
etc. etc."
We will reach a point of critical mass where everyone will be forced into using exactly one password and they will all be the same in order to fulfill all the crap required. Hmm. Maybe that is the master plan after all?
seriously, this sounds like the requirements for my husband's log-in for his payroll account
* at least 16 characters
* no two numbers in sequence
* no sequence of 3 or more letters that could possibly spell a word or a common abbreviation
* at least one upper case and one lower case letter
* special character (most are allowed but there are a couple that are not, like @ and #)
* must be changed every 90 days - originally it had to change every 60 days but they decided that was too onerous
pretty pointless since the Russians have probably hacked into it anyhow...