-
Welcome back Guest!MARSH is a private reefing group. Comments and suggestions are encouraged, but please keep them positive and constructive. Negative threads, posts, or attacks will be removed from view and reviewed by the staff. Continually disruptive, argumentative, or flagrant rule breakers may be suspended or banned.
Passwords (1 Viewer)
- Thread starter d2mini
- Start date
- Tagged users None
Users who are viewing this thread
- Status
sergio nuncio
Guest
Yes, PLEASE !!!!! It really sucks....
Yes!!! I have locked myself out so many times because once you save your password on a device it tries to automatically log you in and it says you have entered the wrong password. The app is the worst about it. #1 there is no way to reset the password from the app. #2 once you save your log in there is no way to enter a new password, you have to delete MARSH from your accounts and then add it back.
Sent from my SCH-I545 using Tapatalk 2
Sent from my SCH-I545 using Tapatalk 2
Last edited:
Jay-Hawks
Supporting Member
Can we please get rid of the new password every 90 days thing?!
So annoying!!!
Absolutely!!!
That sounds like a tapatalk issue not a MARSH problem. Have you put in an enhancement request to them? Kinda stupid to have to un-install the app to change the password.
OceansX
Guest
Can we please get rid of the new password every 90 days thing?!
So annoying!!!
Maybe we could change it to once a year?
Why even have it at all?
There is no other forum that I know of that does this.
And between cars, reef, bicycles, motorcycles, and other stuff, i've been on A LOT.
Well the short of it is that every password that NEVER gets changed becomes a vector for compromise. Maybe 90 days is too short but I disagree very strongly with the notion of "never" changing out of convenience. I work in IT systems and system security is something I have spent a LOT of hours working with, and yes I realize this is a forum.
gm357
Supporting Member
Read my mind on this one..I thought it was just me.
I don't have to delete the app, I have to delete MARSH from the list of accounts I use on Tapatalk. I did ask them about it. Their advice was to stop changing my password.
Sent from my SCH-I545 using Tapatalk 2
Still stupid and short sited on their part.
trb
Guest
Yes, it is annoying, especially when I don't remember what my password is! I've had to have John and Mark reset mine a couple of times. I know after the first time, John put up the "Forgot Password" option on the main page, so I used that the next 2 or 3 times. But this last time it was not there, so Mark had to reset it.
hankintexas
Guest
I use about 5 different passwords every day at work for different programs, all day long. Some are only good for 30 days and must be changed. No two passwords can be similar and none of them can be a word found in a dictionary.
The above said, it is needed for my line of work. This is a recreational website / forum. Semi annual or annual should be plenty. It is aggravating to be locked out due to a password. At the very least, a daily email starting 14 days in advance would encourage members to log in and make changes before they are locked out. Just my opinion.
The above said, it is needed for my line of work. This is a recreational website / forum. Semi annual or annual should be plenty. It is aggravating to be locked out due to a password. At the very least, a daily email starting 14 days in advance would encourage members to log in and make changes before they are locked out. Just my opinion.
Mark L.
Moved On
As an organization we need to take a step back and evaluate the situation. What type of information is compromised if we relax the password requirements for members and guests.
Risk vs Reward. If there is no risk them you can be rewarded.
Consider someone logs into your MARSH account without your knowledge. What all can they corrupt without you knowing? What personal info can they obtain? If you all can review your user account and feel comfortable someone couldn't do any real damage to you personally then maybe we can relax the requirements.
For us BODS/MODS we have access to features on the board that can have real consequences if our accounts are compromised. The users?
Risk vs Reward. If there is no risk them you can be rewarded.
Consider someone logs into your MARSH account without your knowledge. What all can they corrupt without you knowing? What personal info can they obtain? If you all can review your user account and feel comfortable someone couldn't do any real damage to you personally then maybe we can relax the requirements.
For us BODS/MODS we have access to features on the board that can have real consequences if our accounts are compromised. The users?
gm357
Supporting Member
The password thing is cool. 90 days is pretty short though. I have 4 passwords at work and if compromised could shut down many many organizations including the ones most of you guys use daily. Still it's longer than 90 days and includes a 2 week notification to change.
Let's put things in perspective here. I wouldn't suggest throw it out the window. Just lessen the drama when we're require to change it. Hope this helps.
Let's put things in perspective here. I wouldn't suggest throw it out the window. Just lessen the drama when we're require to change it. Hope this helps.
Having just had a scare myself I think not much is at risk that isn't posted publicly anyway. Maybe addresses and phone numbers in my PMs but not much else. If someone who knows what they are doing wants in they will get it regardless of how often passwords are changed. I think the real risk is when you have your password saved on a device and you lose it or someone is using it without your knowledge and changing passwords every 90 days won't stop their immediate access.
I agree BODs and MODs and anyone else who could modify the site has more risk. I think if it can be applied to only those members we can be better served. I know a lot of people come back after some time and have trouble getting back in. Sometimes the just make a new name, but others might get discouraged and not cone back.
Sent from my SCH-I545 using Tapatalk 2
I agree BODs and MODs and anyone else who could modify the site has more risk. I think if it can be applied to only those members we can be better served. I know a lot of people come back after some time and have trouble getting back in. Sometimes the just make a new name, but others might get discouraged and not cone back.
Sent from my SCH-I545 using Tapatalk 2
I would.
Seriously… if someone really wants to post on Marsh as d2mini, more power to them.
hankintexas
Guest
I would keep a password requirement. Just give an alert at least 10 days in advance and increase the changes to 6 months to a year.
Mark L.
Moved On
How about paid members change once a year and guests once a month.
gm357
Supporting Member
^^^^^
- Status
