This practice is not recommended anymore, yet still found in many enterprises.

  • Varyk@sh.itjust.works
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    edit-2
    24 days ago

    really? what’s the standard for that? like how often should you be rotating your password?

    I assumed many people forget their new passwords (because I often do) and become compromised than are protected by continually rotating passwords.

    • slazer2au@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      24 days ago

      It’s one of the updated NIST recommendations, I don’t recall which one but it specifically calls out no password cycling for MFA protected accounts.