Cybersecurity - Memes

1977 readers

2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago

MODERATORS

[email protected]

599

Your password has expired (feddit.org)

submitted 3 months ago* (last edited 3 months ago) by [email protected] to c/[email protected]

85 comments fedilink hide all child comments

This practice is not recommended anymore, yet still found in many enterprises.

you are viewing a single comment's thread
view the rest of the comments

[–] Varyk 23 points 3 months ago* (last edited 3 months ago) (1 children)

oh i didn't know that, are companies finally realizing that creating and trying to remember new passwords causes more trouble then keeping one really good password?

[–] [email protected] 6 points 3 months ago (1 children)

Only on accounts that have MFA is password rotation no longer recommended.

If the account is non MFA protected password changes are still recommend.

[–] Varyk 5 points 3 months ago* (last edited 3 months ago) (2 children)

really? what's the standard for that? like how often should you be rotating your password?

I assumed many people forget their new passwords (because I often do) and become compromised than are protected by continually rotating passwords.

[–] [email protected] 6 points 3 months ago

I have over 500 passwords in my password manager. I don’t know what I’d do without it.

[–] [email protected] 2 points 3 months ago

It's one of the updated NIST recommendations, I don't recall which one but it specifically calls out no password cycling for MFA protected accounts.