Forum Discussion
Forced to reset my password
Why does T Mobile's website force you to reset your password every couple of months!? When banking institutions who actually MANAGE YOUR MONEY leave you in peace, it's crazy for a phone compa...
Well other than for security reasons it's just good practice. With as many Wireless account as there are being hacked into with people's information being stolen and accounts being changed it's somewhat important to have an updated password as well as account verification PIN numbers.
nonetheless this is a standard industry practice and there is no way to opt out of it.
Allow me to point you to several sources over the last few years on why frequent password changes are bad:
Time to rethink mandatory password changes | Comisión Federal de Comercio
From NIST - the United State National Institute for Standards and Technology.
Q-B5: Is password expiration no longer recommended?
A research paper from University of Maryland on why bits of entropy in a password matter more than rules like At least one uppercase letter, one lowercase letter, a number, and a symbol.
http://www.cs.umd.edu/~jkatz/security/downloads/passwords_revealed-weir.pdf
I think I'll believe the security experts over T-Mobile's security decisions.
