Topic on Help talk:Login notifications

The suggestions in Help:Login notifications#Have a strong password are not really up-to-date.

You should not really emphasize the need of special characters or so. It is easy to mathematically calculate (see Wikipedia; n=length of password; k=character set to choose from) that longer passwords are much more secure than a same-length password with more special characters.

This also aligns with new policies by the NIST. See https://nakedsecurity.sophos.com/2016/08/18/nists-new-password-rules-what-you-need-to-know/ e.g.

Wikipedia needs to change this.

They should at least use a password reset or security questions similar to Gmail or Facebook.

E.G.

If you remember the date you join.

Identify the articles you've written.

OR

Then they give you a reset link with your E-Mail.

Sorry, but no. This is exactly the wrong way and also included in the new NIST guidelines. "Knowledge-based authentication" is out as it is totally insecure. (one can just look on Facebook and see most of these things or so.)

And what articles you've written is public too, so you cannot authenticate with that…

This is really only about clarifying the paragraph there…