Replies

1. Expert Member
   BILL WICHERS | Jul 18, 2022 04:50pm | #1

   There is a link from the email GBA will send you when you request a temporary password through the "I forgot my password" link on the login page. Go to the page at that link, it will automatically fill in the temporary password, then enter a new password that meets their requirements. I typed in my username in all lower case, which is pretty standard. The password box REQUIRES a mix of upper and lower case, and at least one special character, which you can think of as "something you type while holding down the 'shift' key". Usually people use something from shift+[any number key] as their special character.

   I'm not a fan of forcing a bunch of special characters in passwords like the new GBA system is requiring. People think "wow, this will make it SO much harder to brute force a password!", which is true. But it's easier to just put a timeout in the login (after three attempts, lock out for five minutes, something like that), which makes brute force login attempts impractical regardless of the structure of the password as long as there are enough characters.

   In my old sysadmin days (which were a long time ago), I remember always thinking to myself that the more complex I required passwords to be, or the more frequently I required passwords to be changed, the more often I would, as the sysadmin, by tied up chaning peoples passwords when they forgot what their new one was.

   Bill

1. Expert Member
   Deleted | Jul 18, 2022 05:57pm | #2

   Deleted