Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote -5 down vote favorite

Does a forum, Q&A, or discussion site really need to require users to create complex passwords when they register? For example, when I registered for a Stack Exchange account, the form required me to use a password that includes small and capital letters, numbers and special non-repeating characters.

I don't think that these sites are particularly security-sensitive, like a bank account, where data loss or disclosure of information can occur if it is not properly protected. They're just discussion or Q&A sites.

I find it annoying when I'm told to make such a complex password that I don't think I can remember it easily. Users end up setting their browsers to remember passwords for them, which I feel is far more dangerous than users creating a weak but easily remembered password (like cat81) which they manually enter when asked to do so.

share|improve this question
1  
This belongs in the meta area. – paradroid Jan 14 '12 at 0:57
2  
Obligatory xkcd.com/936 – grawity Jan 14 '12 at 1:17
2  
@paradroid: No, it doesn't - the question is about passwords on websites, not about Super User specifically. – grawity Jan 14 '12 at 1:18
@ahmd1: The point is that one's forum account (or Super User account) carries their identity. If someone, having my password, posts something under my name, 99% of the readers will believe I posted that. Money transactions are far easier to undo. And as for having the browser remember passwords: it's still more secure since it often requires physical access to your computer to retrieve them, while guessing the password remotely is far easier. – grawity Jan 14 '12 at 1:19
@grawity: yes, you need a good password if you "invest" into your online profile. In that case it is obvious to log in to your CP and change the password. But does an average user of a forum that may ask a question or two need a password with the same strength? – ahmd1 Jan 14 '12 at 1:37
show 6 more comments

closed as not constructive by studiohack♦ Jan 15 '12 at 4:55

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.

1 Answer

up vote 0 down vote

What I like to ponder is password algorithms -- suppose the site is YouTube:

First you start with the obvious "YT", double it "YTYT", put your cursor in the middle and hold down shift and type the ROWS on the keyboard each letter resides "YT!!YT", double it "YT!!YTYT!!YT" now cursor to the middle again and press 1 for a consonant and 2 for a vowel "YT!!YT21YT!!YT", prefix with your initials and suffix with your year of birth and you are all done!

"GWYT!!YT21YT!!YT1732"

Thats just a simple example.

Never forget a password again! =)

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.