Forum Discussion
Forced to reset my password
Why does T Mobile's website force you to reset your password every couple of months!?
When banking institutions who actually MANAGE YOUR MONEY leave you in peace, it's crazy for a phone company to force you to reset.
I know the generic IT response will be "it's for security reasons", but you shouldn't FORCE your customer to "be secure". It should be a warning where we get the OPTION to reset, not being forced to do so.
So I guess my question is, is there a way to opt out of this "security feature" or someone I can talk to that can disable that from my account? After a full year of this nonsense, I'm getting to the point where I'm willing to leave the company if I don't get a resolution soon.
Well other than for security reasons it's just good practice. With as many Wireless account as there are being hacked into with people's information being stolen and accounts being changed it's somewhat important to have an updated password as well as account verification PIN numbers.
nonetheless this is a standard industry practice and there is no way to opt out of it.
I cant agree with that at all but none the less that's just my opinion.
you could do like I do and get two-factor authentication so that once you login you have to get a text sent to your device that you enter in the code. There is extra security there. After all if they don't have your device they don't get the text message.
snn555 wrote:
Well other than for security reasons it's just good practice. With as many Wireless account as there are being hacked into with people's information being stolen and accounts being changed it's somewhat important to have an updated password as well as account verification PIN numbers.
nonetheless this is a standard industry practice and there is no way to opt out of it.
The correct forced password change interval is *never*. This is a bad, bad policy and I can't believe T-Mobile is sticking to its guns on this. Changing a password that is not known to be compromised does NOT improve security, and on the contrary, only forces frustrated users to choose simpler, less secure passwords--or even worse, re-use them.
Agree this is super annoying/ infuriating. At the very least, there should be an opt out if you sign up for MFA. I avoid logging in at all costs because every time I do it's a password, at least two codes texted to me to type in somewhere, and the whole password change process.
with the recent data breach im actually surprised people are still upset that they are being forced to change their PW.
Why are you surpirsed? Mandatory periodic password resets DECREASE security, per the National Institute of Standards and Technology.
One more bump for 'forcing password changes is sh!t policy'. My password was VERY SECURE and all I did was change one number - which I will change back soon. STOP FORCING PASSWORD CHANGES!!!
