4 ms·
The whole point of this article is that rotating passwords is pointless. It doesn’t solve the original problem. MFA is the solution to that problem, not passwor
by ed25519FUUU 6y ago
The whole point of this article is that rotating passwords is pointless. It doesn’t solve the original problem. MFA is the solution to that problem, not password rotation policies with Byzantine change requirements.
A better focus is on plugging the hole where the password was stolen. If it’s not plugged the password will simply be stolen again.
- RandallBrown 6y agoIt helps with the original problem. The reason rotating passwords is pointless is because people always end up changing their password to some easy to guess variation of the original password. If you prevent that from happening, the new password won't be guessable if you have the old one.