That data breach at my old job made me rethink password policies for good

After 180 employees got phished in one week at that marketing firm downtown, I'm wondering if forced 90-day resets actually help or just make people use 'Spring2024!' forever, what's your take on this?

2 comments

2 Comments

cora40014d ago

The forced resets just make people cycle through lazy patterns.

the_hugo13d ago

Yeah @cora400 nailed it, the lazy patterns thing is exactly why forced resets backfire. Windows domain passwords were just rotating through the same six seasons of Game of Thrones names at my last place.