Required password updates at work might be making us less safe

At my job, we have to update passwords every three months. I notice people pick easy to guess passwords because of this. Why do companies still use this method if it causes issues?

3 comments

Log in to join the discussion

Log In

3 Comments

shanejackson6mo ago

Switched to a passphrase system years ago, way easier to remember and more secure.

8

noah8806mo ago

You're right that forced password changes can lead to weak choices. It reminds me of my old neighbor who wrote his passwords on a sticky note under his keyboard after getting tired of resetting them. Someone found it during an office cleanup and accessed his computer for weeks. That kind of shortcut shows how pressure to change often backfires. Maybe the focus should be on longer passwords you can remember instead of constant swaps.

3

julia_robinson716mo ago

Seen that happen too. But here's a thought: constant password swaps might train people to pick easy-to-remember patterns. Makes all their passwords similar across different sites.

7