I'm betting you have some ridiculous password requirements as well, like "Must be 14 characters with an upper case, lower case, symbol, and number, can't have any common words, and can't be the same as your last 12 passwords."
There is the concept of being "too secure", meaning that your system has so many security requirements that your employees become the people subverting the security measures, because they are so onerous that they keep them from being able to work.
No, not really.
They could use an open-source encrypted password wallet.
That's a valid option, but this one of the millennial crowd that has trouble with technology. That's probably beyond him.
(post is archived)