As an IT person I get it.

For a home setup that seems fine. But I can understand why you wouldn’t want this for a whole enterprise.

My last employer did not, life was so much better after the policy change. Although my director lost track of how long he had worked there because he stopped incrementing his password every three months.

That’s because they only read 800-63B and skip the other three documents.

As of 2023, a 16 character password with just lower case letters could be cracked in about 713 years and the average employee stays with a company for about 3.9 years. I really think we are making people work to hard to make good enough passwords and that is how we get people making shitty passwords. And then we ask them to repeat this process every three months, and because getting a password reset is a pain in the ass they right “FuckTh15Pl@ce” on a sticky note under there keyboard (I found that one under a VP’s keyboard).

If we were doing passwords right it would be 12 characters, three character types, last until you leave the company or there is an incident. Also, by not requiring people to change the password every so often it one less thing for the IT Auditor to crab about.

I too watched some clips after his murder. He reminded me of the mentally resident I had when I worked at a group home. The resident thought he was sent by god to save humanity and that we were keeping him from fulfilling his holly mission.

I just want to point out that this person dose not know what they are talking about, and know they don’t know what they are talking about because they qualified their statement with in my opinion. OP asked for an informed response and answer like this are how we get to vaccine conspiracy.

That is still better than in a password manager with no access controls

As long as the notebook is in a locked draw I would pass this on an IT Audit.