4 ms·
I think the keyword is "periodically". They're not saying not to change passwords for any reason; they're just saying not to do it solely because the password
by ScottBurson 9y ago
I think the keyword is "periodically". They're not saying not to change passwords for any reason; they're just saying not to do it solely because the password has been in use for some fixed amount of time. That recommendation applies to users as well as to services setting password policy.