This practice is not recommended anymore, yet still found in many enterprises.
this post was submitted on 20 Aug 2024
6 points (100.0% liked)
Cybersecurity - Memes
1964 readers
1 users here now
Only the hottest memes in Cybersecurity
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Only on accounts that have MFA is password rotation no longer recommended.
If the account is non MFA protected password changes are still recommend.
really? what's the standard for that? like how often should you be rotating your password?
I assumed many people forget their new passwords (because I often do) than are protected by continually rotating passwords.
It's one of the updated NIST recommendations, I don't recall which one but it specifically calls out no password cycling for MFA protected accounts.
I have over 500 passwords in my password manager. I don’t know what I’d do without it.