U.S. CitiesCity-Data Forum Index
Go Back   City-Data Forum > General Forums > Retirement
 [Register]
Please register to participate in our discussions with 2 million other members - it's free and quick! Some forums can only be seen by registered members. After you create your account, you'll be able to customize options and access all our 15,000 new posts/day with fewer ads.
View detailed profile (Advanced) or search
site with Google Custom Search

Search Forums  (Advanced)
Reply Start New Thread
 
Old 10-11-2017, 05:55 PM
 
Location: SE corner of the Ozark Redoubt
2,793 posts, read 936,377 times
Reputation: 2832

Advertisements

Quote:
Originally Posted by runswithscissors View Post
Really helpful info! I'm constantly resetting pswds but don't have the freeze but I might have chosen to do so lately since I even decided to get Lifelock after the stupid breach. So now that SS needs a pswd reset every six months that complicates the issue, too, for people who may be wanting to use the online site fairly often.
Are you saying that SSA has a policy that you have to change your password every six months?
(Which means they are getting their advice from security manuals that are over 10 years old) Or is that just how often something goes wrong? (Which would be normal for government offices.)
Reply With Quote Quick reply to this message

 
Old 10-11-2017, 06:05 PM
 
Location: NC
6,569 posts, read 7,991,101 times
Reputation: 13466
Apparently it is a requirement.
Reply With Quote Quick reply to this message
 
Old 10-11-2017, 06:16 PM
 
10,604 posts, read 14,211,574 times
Reputation: 17203
Quote:
Originally Posted by TRex2 View Post
Are you saying that SSA has a policy that you have to change your password every six months?
(Which means they are getting their advice from security manuals that are over 10 years old) Or is that just how often something goes wrong? (Which would be normal for government offices.)
Yep, it just happened to me yesterday.

It may be a new policy because I've had an account on there for years and don't recall it before.

Everyone is messing around with pswds now, it's so annoying. Like, NOW the big thing seems to be putting some stupid photo on your password screen that you have to look at to supposedly authenticate that it's really the actual website. HUH? LOL BOA started that crap a decade ago, I think.

As IF I'm going to remember which websites have that if I get spoofed.
Reply With Quote Quick reply to this message
 
Old 10-11-2017, 10:28 PM
 
611 posts, read 367,848 times
Reputation: 2025
Quote:
Originally Posted by runswithscissors View Post
Really helpful info! I'm constantly resetting pswds but don't have the freeze but I might have chosen to do so lately since I even decided to get Lifelock after the stupid breach. So now that SS needs a pswd reset every six months that complicates the issue, too, for people who may be wanting to use the online site fairly often.


Just to be clear, you can change your password anytime even if you have a freeze on.
It's only the new account setup and forgot your password web pages that require you unfreeze your account.
Reply With Quote Quick reply to this message
 
Old 10-11-2017, 10:41 PM
 
611 posts, read 367,848 times
Reputation: 2025
Quote:
Originally Posted by TRex2 View Post
Are you saying that SSA has a policy that you have to change your password every six months?
(Which means they are getting their advice from security manuals that are over 10 years old) Or is that just how often something goes wrong? (Which would be normal for government offices.)


Yep. It is not so much as a policy but rather that the SSA forces you to change your password on the next logon if six months have passed since you last changed it.
Reply With Quote Quick reply to this message
 
Old 10-12-2017, 05:59 AM
 
Location: SE corner of the Ozark Redoubt
2,793 posts, read 936,377 times
Reputation: 2832
Quote:
Originally Posted by runswithscissors View Post
Yep, it just happened to me yesterday.

It may be a new policy because I've had an account on there for years and don't recall it before.

Everyone is messing around with pswds now, it's so annoying. Like, NOW the big thing seems to be putting some stupid photo on your password screen that you have to look at to supposedly authenticate that it's really the actual website. HUH? LOL BOA started that crap a decade ago, I think.

As IF I'm going to remember which websites have that if I get spoofed.
It is mainly useful if you do a lot of business with one entity, and want to be able to have someone send you an email with a link that you can click on to, for instance, pay a bill on line, or confirm a charge. My credit union used to use it, and if I logged onto their website, right next to the spot where I was to put in my password, it had a little picture of a xxxxxxxxxx that I had chosen for them to put there. That way, if I went to a site that was spoofing them, (mybank.co instead of mybank.com) the picture would either not be there or not be the right one, and that would tell me something was wrong.

I think the idea is obsolete now, but I was out of the loop (didn't do online banking) for the past couple of years and am just now getting back into it. (Thanks, but no thanks, to Equifax)

Quote:
Originally Posted by Thulsa View Post
Yep. It is not so much as a policy but rather that the SSA forces you to change your password on the next logon if six months have passed since you last changed it.
Well, that is kinda the definition of a policy. A policy is something they can force you to abide by, but they don't have to. It has to be a law for them to be forced to do something.

Again, that is a Network security measure that went out of practice over 10 years ago, so it should not surprise me that they are doing it now.
Reply With Quote Quick reply to this message
 
Old 10-13-2017, 06:17 PM
 
10,604 posts, read 14,211,574 times
Reputation: 17203
Quote:
Originally Posted by Thulsa View Post
Just to be clear, you can change your password anytime even if you have a freeze on.
It's only the new account setup and forgot your password web pages that require you unfreeze your account.
Ahhh thanks for catching that!
Reply With Quote Quick reply to this message
 
Old 10-13-2017, 08:26 PM
 
6,885 posts, read 7,289,708 times
Reputation: 9791
How many of you have set up the 2nd tier extra security of having them send you a the code every time you log on?

Only one account can be set up per number so just registering online at least means no one else can set up an account with your number.

I haven't decided about the extra text cod security yet. It's not really a PITA but is an extra inconvenience.
Reply With Quote Quick reply to this message
 
Old 10-13-2017, 08:55 PM
 
2,215 posts, read 744,140 times
Reputation: 1376
The hackers have moved beyond individual's computers. They are now hacking the source and grabbing millions of people's data.

There is nothing you can do from your end when the hackers are going after the source database.
Reply With Quote Quick reply to this message
Please register to post and access all features of our very popular forum. It is free and quick. Over $68,000 in prizes has already been given out to active posters on our forum. Additional giveaways are planned.

Detailed information about all U.S. cities, counties, and zip codes on our site: City-data.com.


Reply
Please update this thread with any new information or opinions. This open thread is still read by thousands of people, so we encourage all additional points of view.

Quick Reply
Message:

Over $104,000 in prizes was already given out to active posters on our forum and additional giveaways are planned!

Go Back   City-Data Forum > General Forums > Retirement
Follow City-Data.com founder on our Forum or

All times are GMT -6.

2005-2019, Advameg, Inc. · Please obey Forum Rules · Terms of Use and Privacy Policy · Bug Bounty

City-Data.com - Archive 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35 - Top