I’ve been using Windows 7 fairly regularly on one of my machines for the past month or so. One thing I noticed is that the default password settings for Windows 7 include the fact that password expire after 42 days. Since most home users will never change their default settings, this setting will likely become a de-facto standard. However, the default settings also have a password history of zero (no remembered passwords), and a minimum age of zero as well. This means that every home user, when prompted to change their password, will simply change it to the password they had initially, making this setting useless.

Tags: password change, passwords, useless security, windows 7

This entry was posted on Tuesday, October 27th, 2009 at 11:31 am and is filed under Access Control Systems & Methodology. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.