Study: Frequent password changes are useless

Re:Study: Frequent password changes are useless by j_baker on Tuesday April 20, 2010 @04:48PM (#1280549)

The most odd thing is that Microsoft undertook this study. My experience has been that Active Directory can be made to enforce the most sadistic of password policies.

[ Parent | on HN ]

Re:Study: Frequent password changes are useless by sriramk on Tuesday April 20, 2010 @07:15PM (#1280882)

I think a lot of that is what companies want to do with AD. I doubt MSFT is in the business of deciding what people's password policies should be (apart from picking a sane default).

I do think passwords today fail basic usability tests. Having people remember random long, frequently changing strings of letters and numbers is a recipe for disaster. Its sad that we as an industry haven't thought of something better.

[ Parent | on HN ]