Comment on No, Steam wasn’t hacked, and your account details are safe

sirico@feddit.uk ⁨1⁩ ⁨day⁩ ago

• nokturne213@sopuli.xyz ⁨1⁩ ⁨day⁩ ago

  A long, strong, unique password is better than frequent password changes.

  source

  • sirico@feddit.uk ⁨1⁩ ⁨day⁩ ago

    Why not both? My main argument was that while some seem to be saying that the outcry wasn’t justified, it probably made many people have a closer look at their security.

    source

    • scops@reddthat.com ⁨1⁩ ⁨day⁩ ago

      I believe the main concern for periodic password changes is that most people won’t take the time to generate unique passwords each time. They will typically iterate a password over time, meaning a couple leaked passwords will narrow down guesswork to a trivial number of guesses and remove the benefit of the timed changes.

      NIST no longer recommends password expirations except for cases where it is believed that a breach occurred.

      source

      • JustAnotherKay@lemmy.world ⁨1⁩ ⁨day⁩ ago

        The other issue with periodic password changes, particularly in the workplace but also relevant in normal life, is that it causes people to write down their password. The issues with that should be glaring enough

        source

        • -> View More Comments