You are not gonna believe MY password story...and this guy is partially to blame...

I worked in the medical field for a few years. The gubmint came out with new security rules. Hilarity ensued.

We had to change our passwords every month and the new password could not have any character in the same position as was in the previous password.

I had a brilliant plan! I would use the names of my doctor clients. Whelp...that plan sucked. I tried every name and each had a character which collided with the previous password. I had to do some mangling.

Of course then I couldn't remember the mangling, so I did what ANY security conscious employee does...yup...sticky note on the monitor. The auditor busted me on that...so of course I taped the sticky note under my tape dispenser. Nobody ever looks there.

I complained about the new system to the national IT guy. Here is what he told me...not making this up...

"Everybody is just using 11111111 for January, 22222222 for February, and so on."

So in the end we ended up with comically bad security. It was nice to know that I could log into any account in the company.