Get 50% OFF QuickBooks for 3 months*

Buy now
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Work smarter and get more done with advanced tools that save you time. Discover QuickBooks Online Advanced.

Reply to message

View discussion in a popup

Replying to:
BigRedConsulting
Community Champion

Reply to message


@CertifiedSecurityEngineer wrote: Furthermore, you don't allow customization of the QuickBooks password policy.  In our company, we require passwords to be at least 15 characters long with at least two character classes.  QuickBooks "strong" requirement is substantially weaker.  I attempted to set the QuickBooks password to "eivma5ld7wn2lf9" (this is a weak password that meets our requirements), but QuickBooks says the password is not complex.  An example it provides is "coMp1ex".  This causes security professionals to weep.  Why?  Using a brute force attack, I can hack "coMp1ex" in about 6 minutes.  My desired [weak] password would take 701 thousand years to hack.

 

 


Clearly your suggested password, "eivma5ld7wn2lf9", is weak. Obviously, since you didn't include any capital letters. So easy to guess, really. "Eivma5ld7wn2lf9", on the other hand, is totally acceptable. As is, "Password1", which I don't think anyone could really guess.

 

Thank goodness Intuit is saving us from ourselves. Heavens know what could happen if someone saw your EIN or your bank account number. You know, other than every employee you've ever had, every contractor who got a 1099 from you, and every person you've ever written a check to.

Here's Intuit's EIN. Oops!

 

IntuitEIN.JPG

 

Need to get in touch?

Contact us