2 ms·
Because that IS antiquated password advice. 1. In terms of “strong passwords” it’s better to use the words “paraphrase” which if they get past 4 words are almo
by SlowRobotAhead 8y ago
Because that IS antiquated password advice.
1. In terms of “strong passwords” it’s better to use the words “paraphrase” which if they get past 4 words are almost always stronger than traditional “passwords” humans actually use. It’s a nitpick, but using the better term leads to better results in my experience. “Do I need a new password? No, you need a new passphrase”
2. In terms of rolling credentials frequently and on some time period, NIST specifically recommends against that now.