New TSP Password Requirements

genod

Investor
Reaction score
3
Re: $ Intrepid Timer's TSP Strategies

FYI everyone. The tsp website has enacted the requirement for stronger passwords. This has to be done the moment you log in and before you can make any transactions. Be advised not to wait until a few minutes [before the deadline] for anyone wanting to make a transaction.

New passwords need to be over 10 characters with a mix of upper and lower case letters, numbers and special characters.

Geno
 
Last edited by a moderator:
Re: $ Intrepid Timer's TSP Strategies

Yup, TSP and mypay and every other .gov website. Just be prepared to make a new strong password when you log in. It helps to have something in mind. Strong means anything from 12 alphas to 18 alphas upper and lower case, special characters (which may be limited on some sites), numerics and possibly no repeating from any previous password within some time period, perhaps ever. Rules are not standardized. Remember, this is to protect you from yourself and make your memory better. Best advice is that no password for an application should be similar to any other password for any other application and NEVER, NEVER write them down ANYWHERE. A person I know who works in cybersecurity stated "if you can do your job, we are not doing ours". Get used to it. My best advice is to use the "forgot my password" link if you don't log in every day. For those personnel information sites (like ESS or eOPF) soon you will have no rights to see that stuff anyway. Just trust your employer to take care of you!

It is a brave new world.

PO
 
Re: $ Intrepid Timer's TSP Strategies

Just reset mine, what's next 50 digits?:suspicious:
 
Re: $ Intrepid Timer's TSP Strategies

No. 26 alphas, 10 digits, 15 special characters, non repeated ever. That will soon solve the cyber security problem and make you unable to access the web site. Their problem is solved except for the hackers. If the customer cannot access the web site, mission is accomplished.
 
Re: $ Intrepid Timer's TSP Strategies

Amazing and the Lottery only has 7 numbers and you have something like 1 in 35 million chance of winning, but they can crack your 8 letter, upper and lower case, special characters and numbers passwords in a minute?What?!!!!!
 
Re: $ Intrepid Timer's TSP Strategies

I just changed mine. Now how am I to remember the new word?
 
Re: $ Intrepid Timer's TSP Strategies

FYI everyone. The tsp website has enacted the requirement for stronger passwords. This has to be done the moment you log in and before you can make any transactions. Be advised not to wait until a few minutes [before the deadline] for anyone wanting to make a transaction.

New passwords need to be over 10 characters with a mix of upper and lower case letters, numbers and special characters.

Geno

Thanks for the heads up. Just changed mine.
 
Re: $ Intrepid Timer's TSP Strategies

Now- to REALLY throw a monkey wrench into things.

I have BOTH a Civilian account and a Military (reserves) account.

Both were previously accessible to me under a single User ID.

Yesterday, I changed the password and it was defaulted to the civilian account.

However, I was UNABLE to access my military account.

So today, I logged in using the OLD password that I changed yesterday, and it asked me if I wanted to change the password on my MILITARY account.

So I changed it today to match the civilian account password I changed yesterday.

And now I have access, once again, to both accounts, under a single signon, single password.

But it took two password changes to make that happen.

Who would have thunk it?
 
Re: $ Intrepid Timer's TSP Strategies

You can use an email address (made up. Not a real one) as a password. It works and is easier to remember.


Sent from my iPhone using Tapatalk
 
Re: $ Intrepid Timer's TSP Strategies

Smells like Q1 2008 when employee ID became the required log in. I know it sounds simple but it took me a while to get my money back to the G fund and I was traped in a falling market at the time, will never forget the pain of it. I was struck by the pure market timming of the whole event. Look out bellow !!
 
Re: $ Intrepid Timer's TSP Strategies

For two days now i can't access my TSP account. I was going to change my passworsd once i logged in. I called and the lady told me there was updates going on and to try later. Well, I did and no luck. After several attempts to log in it suspends your account for an hour. Seems like there could be another way of doing updates and still allow me to log in. Frustrating!
 
Re: $ Intrepid Timer's TSP Strategies

I tried logging into the TSP Website on Monday but the system would not accept my existing password and I too hit the account suspended for an hour after too many attempts. I called the TSP Thriftline and the rep told that this was happening to "thousands" of members. The only way around it is to request a new temporary password that will be mailed to me in about a week. For now, any TSP transactions I might want to make will have be done via the phone Thriftline at (877) 968-3778.
 
Re: $ Intrepid Timer's TSP Strategies

Okay, I posted yesterday that I had trouble getting into my TSP account. I did again today. When I called the TSP I had the nicest lady tell me how to change the PW. She said to sign in using your account #, next type only first 8 characters of your current password, then hit enter. A screen should prompt you to update your new password. That's it.
 
Re: $ Intrepid Timer's TSP Strategies

Changed mine to 12 characters the day before yesterday, it still works!
 
Re: $ Intrepid Timer's TSP Strategies

Okay, I posted yesterday that I had trouble getting into my TSP account. I did again today. When I called the TSP I had the nicest lady tell me how to change the PW. She said to sign in using your account #, next type only first 8 characters of your current password, then hit enter. A screen should prompt you to update your new password. That's it.

Changed mine to 12 characters the day before yesterday, it still works!

It sounds to me like they truncated the password field in the database. So all passwords used prior to changing only have 8 valid characters to validate against.
 
Probably happening to millions, if not all TSP accounts!!

This is what TSP Posted on its site May 11, 2014 and you can check it out at TSP.gov:
Stronger Web passwords — (May 11, 2014) The TSP now requires that all Web passwords be at least 10 characters in length. The next time that you log into the My Account section of our website, you will be prompted to change your password to one of your choice using our new requirements. Be aware that the TSP does not email you to change your password.

Guess what! They did not implement the part that says the next time you log in you will be prompted to change your PW! They are correct as they did not email anyone to let them know you would be locked out of your account if you did not have at least a 10 character length PW! Also, they did not tell anyone they would have to wait for up to 10 days to get a new PW thru the mail before they could get into their account again! How inefficient and moronic can the Gov and TSP be?? Now, TSP is very secure because most of its members are locked out of TSP’s online Service!
A Newspaper Story on this should be ran to embarrass the Managers at TSP, because they need to be embarrassed, and they need to apologize to all TSP members, or be replaced with competent people who know something about the security needs of a TSP online account! It certainly does not need or require a PW length of 10 digits or more, as there is very, very, very, little rick that someone or anyone could actually remove money from someone’s account even if they were somehow able to get into it or login to it! Its not like an online banking account, where someone could actually remove money from if they were able to access another person’s account! TSP needs to get real and be honest with its members!!
 
Re: $ Intrepid Timer's TSP Strategies

I had to call TSP twice in as many days in order to get that answer "only first 8 characters of your current password". I was a little pi$$ed.
 
I tried my new (more than 10 character) password just now-- No problem at all.

I have no issues looking at my account.
 
Back
Top