Forum Discussion
Changing password every 60 days is a terrible policy
I recently log into my.t-mobile site and have to change my password due to this new policy. This new policy is terrible due to multiple reasons. Anyone who is current on IT security should know t...
¡Hola, @timph! I heard back from our contact who owns the content around the password change process; and was advised firmly that as the system stands, password changes should only be obligatorio once a year -- though as best practice we recommend changing them more frequently. I know this conflicts with what you saw, so while I wish i could explain the difference, I'm sorry to say I'm not able to speak to that.
@scott523, in this case, that means that you were able to use the same password for longer than designed before the update prompt, which I believe is because this policy wasn't implemented when your account was initially started -- after reviewing revisions to our documents, it looks like the Prompted to change your password section was added at the beginning of this year.
Restablece la contraseña de tu ID de T-Mobile has been updated to call out the yearly password change requirement in the Prompted to change your password section, and I'm also adding the feedback that we include the password recycling rule in the requirements section as well -- hopefully that will be OK with our content folks!
Thank you again very much again for your feedback around this. I know that adding an extra step to your day by having to create a new password with some relatively stringent requirements compared to other sites isn't fun, but at least we can confirm that this shouldn't happen frequently. If it does; please let us know.
I am totally annoyed (and frustrated) at the way Tmobile handles their password resets. Although I understand the need to change passwords occasionally, it is ridiculous to have to change them every 60 days. To make matters worse, we are not given any notice or warning. I wanted to log in a pay my bill today and was not allowed to access my account without "changing" my password. But of course, it wasn't that simple. No, I had to have them send me a verification code first. That totally annoys me. So I had them send me an email. The email I received said "Forget your T-Mobile ID password? We hate when that happens, but it's an easy fix. Just click the button below to create a new one:" Receiving a message like that when I forgot my password it great but in this instance it took me beyond annoyance to anger because I didn't forget my password. Nor did I want to change it. Rather, they FORCED me to change it. Most places (that don't wish to cause their customers total frustration) will at least allow you to log in with your credentials then take you to a password update page so they can change it right away rather than having to go through the whole verification process. Again, I do understand the reasoning and appreciate Tmobiles commitment to keeping our accounts safe but angering your customers by forcing them to jump through multiple hoops without any forewarning is not very nice. Why couldn't I be given a heads up? What about a warning letting me know that my password was about to expire or an option to delay changing it but letting me know that I would need to change it within x numbers of days or something. Instead, rather than being able to quickly log on to pay my bill I've had to spend several minutes dealing with this whole password mess. To add insult to injury, they apparently changed their password parameters so that the "special character" that I have been using is no longer allowed. Then (in my rush to get this over with) I accidentally hit the caps lock button, so my new password is in caps (I think), which I don't want. I tried to change it again (to non-caps) and the website wouldn't let me change my password again. So, it appears that we are not allowed to change our passwords when we want to but are forced to change it when they decide they want us to without any forewarning, at the most inconvenient time and in the most annoying way possible. Gee, thanks Tmobile. I couldn't even post anything to these discussion boards without first verifying my account. Why can't I log in with my current password and change it from there?
