How can I supersede the password requirements of the vault

I have a standard scheme I use for passwords that does NOT include non-letters and non-numbers.

 

I do NOT want to start including these ridiculous characters because Norton happens to have decided that they know better than I do what's in my interest on my laptop.

 

Is there a way to modify the vault's password requirements or do I need to drop all my Norton Internet Security subscriptions and switch to another product whose vendor doesn't feels it has this authority to dictate what customers want.

Hi klamerus,

 

I am not aware of a way to circumvent the requirment to use a strong password for your vault.

 

Please run the Norton Removal Tool if you decide to drop all of you NIS subscriptions, as the left over digital debris may cause conflict with your next selection.


klamerus wrote:

I have a standard scheme I use for passwords that does NOT include non-letters and non-numbers.

 

I do NOT want to start including these ridiculous characters because Norton happens to have decided that they know better than I do what's in my interest on my laptop.

 

Is there a way to modify the vault's password requirements or do I need to drop all my Norton Internet Security subscriptions and switch to another product whose vendor doesn't feels it has this authority to dictate what customers want.


A secure password usually includes those non standard characters so a dictionary search will not be effective in trying to break your password. Even if you are using acronyms, these can be deciphered.

 

There is no way to bypass this requirement in Identity Safe.

 

Be sure to check with any other option you choose. I believe that if it is indeed a secure option, it will require the same level of password.

Hi klamerus,

 

A password containing one or more symbols is not just a little stronger than a password containing only letters and numbers, it is actually quite significantly stronger.  I highly recommend that you read the Q&A's and experiment with the Interactive Brute Force Password "Search Space" Calculator offered at GRC to discover what a difference the addition of a symbol can make in strengthening a password:

 

https://www.grc.com/haystack.htm

The respondants (and Norton) apparently don't get it.  People want to control this kind fo stuff not have it dictated to them.  We don't care about having these characters, but if we're going to require that then why don't we also require 52 character long password or 300?  And let's throw in cyrillic characters too.  Windows can handle it, yes?

 

I find it pretty absurd that the password that secures a wallet on my desktop has to be (no choice) secured more than the passwords required by:  PayPal, Chase Bank, IRS, Comerica, Microsoft, and yes, even Norton's own web accounts on their web site (including this forum).

 

Probably need to switch to McAfee.  At least the only risk I have with that is of being shot.

Just because you are willing to take a calculated risk with your personal passwords, the company that is helping manage this information cannot take the same risks.

 

If something were to happen to your data while under the 'care' of a company's  password vault, you might be tempted to bring legal action against them. This might explain the requirement for a strong password.

 

If you do switch to another company, be sure they are indeed offering what you are looking for. 

 

 


klamerus wrote:

The respondants (and Norton) apparently don't get it.  People want to control this kind fo stuff not have it dictated to them. 


Oh, I do get it.  Security always comes at the expense of convenience - and each person has a different idea of where the tradeoffs should be made.  But even so, all sites, including those you mention, "dictate" the terms of what they will accept as passwords.  Some just require more secure passwords than others.  I have the opposite situation of yours - I also use a formula to create passwords, only mine use length and as many types of random characters as I can find on a keyboard.  My problem is that there are still some sites that won't take anything more sophisticated than an 8-digit non-case-sensitive alphanumeric password.  At least most sites do seem to be wising up, however slowly.

 

By the way, if you look at the actual passwords that were revealed in last summer's Yahoo breach, it should be obvious why more companies are starting to tighten up the rules on permissible passwords.

 

Man, I think I could crack all of you passwords within 30 minutes or less with readily available tools on the web, and I'm not experienced at it, those companies you brought, PayPal for one does require at least a 6 character+1 symbol PWD.

Why be so stubborn? Use the feature or don't. If you go with McAfee it will eventually crash you PC if you have Win 7 or 8, XP will be fine though.

 

You do realize there are people/organizations who work every day, long hours, to find people like you with weak security?

 

Have a good day.