Each day for the past two weeks, my work computer has greeted me with the following message:
“Your password will expire in X days. Would you like to reset it now?”
My choices are “Yes” and “No.” Needless to say, my morning routine now includes clicking “No.” I will continue to do so until I absolutely must change my password. Who has the time –- literally dozens of seconds –- required to change a password? In case you haven’t heard, I’m very busy and important.
It seems to me that it would be in the best interests of corporate security if better choice architecture were employed. How about something like:
“Unless you correctly name each Teenage Mutant Ninja Turtle in alphabetical order and then list the first five R.E.M. albums in the next 10 seconds, we will require that you change your password.”
Maybe not exactly that. Maybe Primus instead of R.E.M.
