News for hackers. Stuff that matters.

A comment on Microsoft says mandatory password changing is “ancient and obsolete” (2019). Parent comment

Re:Microsoft says mandatory password changing is “ancient an... by withinrafael on Monday April 19, 2021 @01:12PM (#26865256)
And NIST. https://pages.nist.gov/800-63-FAQ/#q-b05
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by mattowen_uk on Monday April 19, 2021 @01:18PM (#26865349)
And NCSC:

https://www.ncsc.gov.uk/collection/passwords/updating-your-a...

[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by sharken on Tuesday April 20, 2021 @01:14AM (#26870930)
So at least three reputable sources recommend not changing passwords periodically. Maybe that can persuade my employer though i doubt it.

One aspect though is that some people tend to use the same password in multiple places and with passwords ending up in https://haveibeenpwned.com, you might argue for periodic password changes.

[ Parent | on HN ]