4 ms·NIST just updated their guidelines, removing the requirement to change passwords, for that very reason. :)by mcheshier 9y agoNIST just updated their guidelines, removing the requirement to change passwords, for that very reason. :)