Summary

  • The common advice to change passwords every few months has been widely questioned for several years, with many people finding they change weak passwords for stronger ones, or they simply forget their new password.
  • Security experts now say mandatory, frequent password changes often lead to weaker security, not stronger.
  • Instead of changing all passwords on a regular basis, users are advised to update them after specific incidents, such as sharing a password, or after a data breach.
  • Users are also encouraged to use a password manager and enable two-factor authentication, where possible.
  • Where biometrics are available (such as fingerprint ID), this can also improve security, as these are seen as more difficult for hackers to gain hold of than passwords.

By Yasir Mahmood

Original Article