Monday, 23 November 2015

Is there a legal requirement to 'secure' passwords?

A big pet peeve of mine and many people is the extend to which every single website goes to make you choose a password you can't possibly remember. So now that we're building a new website in our own framework, we have to set rules for registration.
 
What I'd prefer to do is just let people choose whichever damn password they like, and simply warn them how they could make it more secure - a warning they can ignore if the want. So if someone wants to choose "lovebabyjoey" as their password, I'd like to show a notice saying something along the lines of "hey, just so you know, 'L0v3BabyJoey is more secure, are you sure?", but will ultimately accept whichever password they choose.
 
My question, are there in the United States or in the European Union laws which require website owners/businesses to force their users to use 'secure passwords' that I should be aware of?



Epic visual tool

Epson 5030UB 2D/3D 1080p 3LCD Projector Submitted November 23, 2015 at 10:26PM by Martijngamer http://ift.tt/1I76VR6

No comments:

Post a Comment