Hit 500 password resets in one month and it finally clicked why people reuse the same one
I pulled my ticket log for March at the shop and counted 500 password resets, which is about 25 a day. I started writing down what each person told me when I asked why they don't just write it down somewhere. 312 of them said some version of "I'll never remember it anyway." That was the moment I stopped blaming users and started blaming the rules we make them follow. Now I ask clients if they want a passphrase instead, and almost nobody says no. Does anyone here push back on IT policy that clearly fights human nature?