cron@feddit.org to Cybersecurity - Memes@lemmy.worldEnglish · edit-23 months agoYour password has expiredfeddit.orgimagemessage-square78fedilinkarrow-up11arrow-down10file-text
arrow-up11arrow-down1imageYour password has expiredfeddit.orgcron@feddit.org to Cybersecurity - Memes@lemmy.worldEnglish · edit-23 months agomessage-square78fedilinkfile-text
minus-squareVaryk@sh.itjust.workslinkfedilinkarrow-up0·edit-23 months agooh i didn’t know that, are companiesy finally realizing that creating and trying to remember new passwords causes more trouble then keeping one really good password?
minus-squareslazer2au@lemmy.worldlinkfedilinkEnglisharrow-up0·3 months agoOnly on accounts that have MFA is password rotation no longer recommended. If the account is non MFA protected password changes are still recommend.
minus-squareVaryk@sh.itjust.workslinkfedilinkarrow-up0·3 months agoreally? what’s the standard for that? like how often should you be rotating your password? I assumed many people forget their new passwords (because I often do) than are protected by continually rotating passwords.
minus-squareskittlebrau@lemmy.worldlinkfedilinkarrow-up0·3 months agoI have over 500 passwords in my password manager. I don’t know what I’d do without it.
minus-squareslazer2au@lemmy.worldlinkfedilinkEnglisharrow-up0·3 months agoIt’s one of the updated NIST recommendations, I don’t recall which one but it specifically calls out no password cycling for MFA protected accounts.
oh i didn’t know that, are companiesy finally realizing that creating and trying to remember new passwords causes more trouble then keeping one really good password?
Only on accounts that have MFA is password rotation no longer recommended.
If the account is non MFA protected password changes are still recommend.
really? what’s the standard for that? like how often should you be rotating your password?
I assumed many people forget their new passwords (because I often do) than are protected by continually rotating passwords.
I have over 500 passwords in my password manager. I don’t know what I’d do without it.
It’s one of the updated NIST recommendations, I don’t recall which one but it specifically calls out no password cycling for MFA protected accounts.