3 ms·
What about an undetected data breach leaking username and passwords? Periodic password replacement reduces the window where someone's stolen password is used a
by amtamt 5y ago
What about an undetected data breach leaking username and passwords? Periodic password replacement reduces the window where someone's stolen password is used a long time after breach. This may not be the threat scenario for every type of accounts, but in some type it would one among the most important ones.
- jaywalk 5y agoIf it remains undetected, the rotated passwords will still be leaking. Once you detect and mitigate it, you force everyone to reset their password immediately. Periodic password rotation is pointless.