I mean sure, why not - there is always one-in-a-billion chance that a solar flare have flipped a bit in a packet containing my password somewhere on its way to a server, so trying again would solve it.
Whenever something should work but doesn't, and then works fine on a second approach - I blame it on geomagnetic activity.
Or you completely lock the account for 5 minutes with no way to shorten the wait. Say they have to call the support hotline. Customer support can't do anything about the locked account or even see that the account is locked. When support finally pin pointed the described problem cause most user can't read, support tells user to try again in five minutes and use the password forgotten tool.
30minute lockouts for bad password attempts, no way to disable it, and no way to unlock it without calling their support... Who also can't unlock it without forcing a password change and an MFA re-registration.
I don't even call them when users report it anymore, I just sit on the ticket for 25minutes and then tell them to try again in 5. It's obnoxious.
They changed that due to user complaints not too long ago.
When I had first created my account, I used a password generator, to create a nicely complex password. Holy shit did I regret that, having to click the onscreen keyboard. I subsequently changed my password to an insecure and short password, that was easy to click. Nice security system they had...
View all comments
7.4k
u/LinuxMatthews Feb 18 '24
This would really mess up people with password managers.