Re:Why don't we expire passwords on the web?
by henry81 on Monday December 13, 2010 @12:00PM
(#2001065)
Because expiring passwords is a horrible idea.
At the place I work at, most everyone just changes their password monthly like: "password1", "password2", etc.. Anything more difficult than that then they are likely to forget their password.
Another awful idea is locking people out if the password is wrong after 3 attempts. Then you have mischievous characters entering in 3 bogus passwords just to lock you out of your account and inconvenience you.
The whole concept of expiring passwords should be gotten rid of everywhere.
At the place I work at, most everyone just changes their password monthly like: "password1", "password2", etc.. Anything more difficult than that then they are likely to forget their password.
Another awful idea is locking people out if the password is wrong after 3 attempts. Then you have mischievous characters entering in 3 bogus passwords just to lock you out of your account and inconvenience you.
The whole concept of expiring passwords should be gotten rid of everywhere.