Complex passwords aren’t always better

Recently I’ve had the exam for the CompTIA Security+ Certification.

While practicing for the exam, I’ve had the following question.

My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various levels of AI support.
Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/

Q:When setting password rules, which of the following will lower the level of security of a network ?
A: Complex passwords that users can not remotely changed are randomly generated by the administrator and given to users

Why ?

Very simple, actually 🙂
Because the users will write these passwords on stickers and hang them on their monitors 🙂
So, IT guys, please make your life simpler and let the users to change the passwords.
There you must definitely enforce some policies !


© Copyright 2011 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology


Want to work with me on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.

Related Posts

Quoted by softpedia.com

Softpedia took again one of my posts in the Avira Techblog and wrote an article based on it: “In the recent past we saw emails looking like phishing mails, which were spam though actually. The spammers tried to make them look as much as possible as official mails from the entity they were faking: Amazon, […]

How to exhaust the space on any online backup system

Check the other article I wrote about Dropbox. While playing with the mklink, I made a mistake of trying something new: My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various […]

Microsoft Defender and dangerous alert levels

Description: This program changes various computer settings. My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various levels of AI support. Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/ Advice: This software […]

One thought on “Complex passwords aren’t always better”

  1. Pingback: Tweets that mention Complex passwords aren’t always better -- Topsy.com

Comments are closed.