Re:Man who made passwords hard regrets rules that 'drive peo...
by eksemplar on Thursday August 10, 2017 @02:50AM
(#14977091)
Rotation makes people pick things like Winter2017 or write it down, and it offers little safety because being compromised for 3 months isn't that much better than being compromised for a year.
Rotation is great if it's implemented correctly. The problem is that it's too much of a burden on users, therefore they implement it poorly, and then it's less useful or a weakness.