Company-wide password reset backfired hard at my old job

My last employer made everyone reset their passwords on the same day every 90 days. After the second reset, our IT help desk got flooded with 200+ tickets from people writing passwords on sticky notes. They literally had a stack of yellow Post-its under keyboards all across the office. Has anyone else watched a security policy turn into a bigger vulnerability than the one it was supposed to fix?

2 comments

2 Comments

pat3601d agoMost Upvoted

...and people wonder why security theater drives me crazy. Nothing says "we take security seriously" like a desk full of passwords in plain sight.

anderson.spencer16h ago

Question whether this is really a big deal @pat360 passwords on sticky notes are fine if nobody steals them lmao