Logged in to my Medicare account recently to update password. They used to require an update every six months but got so many complaints they dropped that requirement. After half a dozen unsuccessful attempts to create a new PW I started a chat with a support person. She began by informing me the password guidelines on the Medicare.gov website are wrong. Why are they there if they are wrong? She had no idea and gave me some different guidelines:

1. You should create a NEW password that is 8 – 16 characters in length.
2. The password must not include # or &
3. Must include at least one letter, number and at least one special character such as (@) ($) (%) [but not at the end of the password!]
4. Cannot be the same as your username.

Additional guidelines: please do not follow the creation guidelines in the system at this time. You will need to use at least one capital letters, four numbers and a special character however; you may not use a number or symbols at the beginning or at the end of the password. An example of a good password would be “Home1234$Home.” Alternatively “Red2015$car” You will need to use a minimum of three numbers in the middle.

These didn’t work either so I wound up on the phone with a gentleman who explained these guidelines are not right either. (“Sorry about that. Ha ha!”) Wound up creating a new account with a really lame-ass password.

ME: “Should I change this from time to time?”
SUPPORT: “I wouldn’t.”