[object Object]

  • 2 Posts
  • 3 Comments
Joined 10 months ago
cake
Cake day: September 22nd, 2024

help-circle
  • Could be because OWASP now actively recommends against periodic password changes.

    Ensure credential rotation when a password leak occurs, at the time of compromise identification or when authenticator technology changes. Avoid requiring periodic password changes; instead, encourage users to pick strong passwords and enable Multifactor Authentication Cheat Sheet (MFA). According to NIST guidelines, verifiers should not mandate arbitrary password changes (e.g., periodically).