MSGID: 2:221/360.0 5f6ca8ae
PID: JamNNTPd/OS2 1.3 20200711
TID: GE/2 1.2
CHRS: UTF-8 4
TZUTC: 0300
The folks at iPage are still pestering me:

ACTION REQUIRED: ipage Password Requirements

[1]
Password Requirements
(Action Required)
- 8 character minimum (New as of 6/25! reduced from 16 character)
- Contains one upper case letter, one lower case letter, and one digit
- Does not match previous 10 passwords
- Does not contain the user’s first name, last name, or ipage User ID

[2]
Security Questions and Answers
(Action Required)
5 questions will be provided. Choose two questions and establish
answers for both.
Answer Requirements:
- Minimum of 3 characters
- Cannot duplicate questions or answers
- Cannot contain User ID, email
- Cannot match password

[3]
Password Expiration
(For your information)	Passwords expire after 365 days
- Users will receive a reminder email 14 days prior to expiration:


Regarding [1] above, the existing pw is already 8-char and meets the
upper/lowercase and numerical requirements. It hasn't changed since
I joined many years ago, so I assume the "action required" refers to
the 365 day expiration, item [3].

The pw is already quite cryptic (no actual words), so the
requirement to change it is irksome. Studies have shown that
changing a password does not improve security.  The onus of security
ought to lie on the server side with encrypted databases - which no
one seems to implement.

WRT [1] above, all I'm encouraged to do is simply add the same last
character to my pw, save it, and move on for another 365 days. It's
easier to remember the same last character than dreaming up a new
pw.  :)

At least I don't have to change the stupid [2] requirements every year.


-- 

--- TB(Stealth)/Win7
 * Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)
SEEN-BY: 1/123 90/1 120/340 123/131 226/30 227/114 702 229/101 275
SEEN-BY: 229/424 426 452 664 1016 240/5832 249/206 317 400 292/854
SEEN-BY: 317/3 322/757 342/200
PATH: 221/360 1 280/464 229/101 426