4 ms·

And NIST. https://pages.nist.gov/800-63-FAQ/#q-b05 https://pages.nist.gov/800-63-FAQ/#q-b05

• mattowen_uk 5y ago
  And NCSC: https://www.ncsc.gov.uk/collection/passwords/updating-your-approach https://www.ncsc.gov.uk/collection/passwords/updating-your-a...
  • edlebert 5y ago
    And my ax!
  • sharken 5y ago
    So at least three reputable sources recommend not changing passwords periodically. Maybe that can persuade my employer though i doubt it. One aspect though is that some people tend to use the same password in multiple places and with passwords ending up in https://haveibeenpwned.com https://haveibeenpwned.com, you might argue for periodic password changes.
• deleted 5y ago
  [deleted]