4 ms·
Breaches happen. You can't always be sure you (or dictionaries) will know.
by ryanisnan 5y ago
Breaches happen. You can't always be sure you (or dictionaries) will know.
- the_snooze 5y agoEven assuming a silent breach happens, it's unclear what's the value-add of password rotation in the context of other solutions that are less burdensome on the user: proper hashing of password databases (in case of a password DB breach) and risk-based authentication (in case of an inadvertent disclosure, like in logs).