Varyk comments on Your password has expired

Your password has expired (thelemmy.club)

submitted 2 years ago* by cron@feddit.org to c/cybersecuritymemes@lemmy.world

84 comments fedilink hide all child comments

This practice is not recommended anymore, yet still found in many enterprises.

I am once again asking you to change your password

[–] Varyk@sh.itjust.works 23 points 2 years ago* (last edited 2 years ago) (4 children)

oh i didn't know that, are companies finally realizing that creating and trying to remember new passwords causes more trouble then keeping one really good password?

permalink

fedilink

source

hideshow 4 child comments

[–] slazer2au@lemmy.world 6 points 2 years ago (3 children)

Only on accounts that have MFA is password rotation no longer recommended.

If the account is non MFA protected password changes are still recommend.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] Varyk@sh.itjust.works 5 points 2 years ago* (last edited 2 years ago) (2 children)

really? what's the standard for that? like how often should you be rotating your password?

I assumed many people forget their new passwords (because I often do) and become compromised than are protected by continually rotating passwords.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] skittlebrau@lemmy.world 6 points 2 years ago

I have over 500 passwords in my password manager. I don’t know what I’d do without it.

permalink

fedilink

source

parent

[–] slazer2au@lemmy.world 2 points 2 years ago

It's one of the updated NIST recommendations, I don't recall which one but it specifically calls out no password cycling for MFA protected accounts.

permalink

fedilink

source

parent