# Password Rules Are Bullshit

**URL:** <https://discourse.codinghorror.com/t/password-rules-are-bullshit/5033>\
**Category:** blog\
**Created:** [March 10, 2017, 11:20am UTC](https://discourse.codinghorror.com/t/password-rules-are-bullshit/5033 "2017-03-10T11:20:05Z")\
**Posts on this page:** 3\
**Page:** 12

<div class="post-metadata">

**Author:** ![philCryo](https://discourse-cdn.codinghorror.com/user_avatar/discourse.codinghorror.com/philcryo/32/78590_2.png) [@philCryo](https://discourse.codinghorror.com/u/philCryo)\
**Post date:** [September 28, 2024, 7:07am UTC](https://discourse.codinghorror.com/t/password-rules-are-bullshit/5033/230 "2024-09-28T07:07:53Z")

</div>

[Ars Technica: NIST proposes barring some of the most nonsensical password rules](https://arstechnica.com/security/2024/09/nist-proposes-barring-some-of-the-most-nonsensical-password-rules/)

---

<div class="post-metadata">

**Author:** ![JimPas](https://discourse-cdn.codinghorror.com/user_avatar/discourse.codinghorror.com/jimpas/32/76163_2.png) [@JimPas](https://discourse.codinghorror.com/u/JimPas)\
**Post date:** [September 28, 2024, 7:08am UTC](https://discourse.codinghorror.com/t/password-rules-are-bullshit/5033/231 "2024-09-28T07:08:41Z")

</div>

Banks are big on forcing users to change PWs every 90 days. 🙄

---

<div class="post-metadata">

**Author:** ![codinghorror](https://discourse-cdn.codinghorror.com/user_avatar/discourse.codinghorror.com/codinghorror/32/36371_2.png) [@codinghorror](https://discourse.codinghorror.com/u/codinghorror)\
**Post date:** [May 17, 2025, 3:48am UTC](https://discourse.codinghorror.com/t/password-rules-are-bullshit/5033/234 "2025-05-17T03:48:43Z")

</div>

Ok this is really funny:

> **[K. Reid Wightman :verified: 🌻 :donor: (@reverseics@infosec.exchange)](https://infosec.exchange/@reverseics/114518353011297142)**
>
> A password consisting only of lowercase L's, uppercase i's, the number 1 and the | pipe..
> 
> \`I|l11IllIIllIlIlII|\` 
> 
> ...technically satisfies all password requirements.

BRB, changing all my passwords from `monkey1` to `I|l11IllIIllIlIlII|`

[Previous page](https://discourse.codinghorror.com/t/password-rules-are-bullshit/5033.md?page=11)