News for hackers. Stuff that matters.
Re:NIST advises services to not require that passwords be ch... by ScottBurson on Saturday May 20, 2017 @02:37PM (#14383670)
I think the keyword is "periodically". They're not saying not to change passwords for any reason; they're just saying not to do it solely because the password has been in use for some fixed amount of time. That recommendation applies to users as well as to services setting password policy.

There are no comments on this comment yet.