Loading…
19
PSA: I stopped changing passwords every 90 days and nothing bad happened
Our IT guy pushed the 90 day password reset for 6 years and I finally pushed back after reading that NIST guidance changed in 2017, since forced rotation mostly makes people pick weaker stuff. We switched to long passphrases with 2FA in January and our ticket count for lockouts dropped by half. Anyone else fight this battle with their boss?
0 comments
Log in to join the discussion
Log In0 Comments
No comments yet
Be the first to share your thoughts on this discussion.