you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 1 year ago (1 child)

Interesting, stopped seeing this a while back. Forced change after the inevitable hack though of course

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 8 points 1 year ago

    Could be because OWASP now actively recommends against periodic password changes.

    Ensure credential rotation when a password leak occurs, at the time of compromise identification or when authenticator technology changes. Avoid requiring periodic password changes; instead, encourage users to pick strong passwords and enable Multifactor Authentication Cheat Sheet (MFA). According to NIST guidelines, verifiers should not mandate arbitrary password changes (e.g., periodically).

  • source
  • parent