Why is changing your password regularly not a good idea?

One of the most enduring pieces of password security knowledge is that changing your passwords regularly increases security. At least, that's what IT teams around the world have been pushing on people for decades.

However, that advice has always been met with resistance. Many in the security industry argue that this leads to passwords that are easy to remember. Now, research has proven this theory, demonstrating that frequently changing passwords can lead to security problems.

Changing passwords frequently leads to poor security

Many of us find mandatory password changes every 4, 6, or 8 weeks intimidating. One IT group promotes the idea that changing your password will make any security breaches irrelevant, since everyone will use new passwords.

Why is changing your password regularly not a good idea?

In practice, this leads to weaknesses in password creation. Instead of creating strong, unique, and hard-to-guess passwords, most people choose passwords that are easy to remember with small, repeated parts.

For example, a strong 16-character password might be "hS'9{yX?Fzu#=_:R", which includes a mix of uppercase and lowercase letters, numbers, and symbols. It's hard to remember, but over time, you'll get the hang of it. Whereas if you had to change your password every month, you wouldn't have time to remember it. So people started using easier-to-remember phrases with small, repeated parts.

  • January: difficultpassword1
  • February: d1fficultpassword2
  • March: d1ff1cultp4ssword3
  • V,v...

Choose strong, unique passwords (or use a password manager)

The UK's National Cyber ​​Security Centre has recommended against using regular passwords since 2015, and now, in 2024, the National Standards Institute is following suit.

Their new advice recommends passwords expire every 365 days, significantly changing the timeframe — and increasing security.

At the same time, NIST is also updating its messaging on password length and strength. In some cases, password creation rules limit users to 12 characters or prevent certain symbols from being used. NIST now recommends that all passwords:

  • Minimum 15 characters
  • Maximum 64 characters
  • Includes all ASCII characters, whitespace characters, and Unicode characters

These changes mean more password entry fields will allow for stronger and more memorable passphrases, while overall password strength is also increased.

Of course, any organization that cares about password security should enable the use of a password manager. There are additional security considerations involved with using a password manager, such as local data storage, zero-knowledge encryption, etc., but it's a best practice to protect all of your accounts with strong passwords.

Leave a Comment

Where to Find the Microsoft Teams Installation Folder on Your PC

Where to Find the Microsoft Teams Installation Folder on Your PC

Struggling to locate the Microsoft Teams Installation Folder on your PC? This step-by-step guide reveals exact paths for new and classic Teams, per-user & per-machine installs. Save time troubleshooting!

Troubleshooting Microsoft Teams Proxy Error Settings Fix

Troubleshooting Microsoft Teams Proxy Error Settings Fix

Struggling with Microsoft Teams Proxy Error? Discover proven Troubleshooting Microsoft Teams "Proxy Error" Settings Fix steps. Clear cache, adjust proxy settings, and get back to seamless calls in minutes with our expert guide.

Solving Microsoft Teams OneDrive Error File Sync

Solving Microsoft Teams OneDrive Error File Sync

Tired of Microsoft Teams OneDrive Error blocking file sync? Follow our step-by-step guide to solve Microsoft Teams "OneDrive Error" File Sync issues quickly. Proven fixes for smooth collaboration in Teams channels. Get your files syncing error-free today!

How to Fix Microsoft Teams Workflows and Power Automate Errors

How to Fix Microsoft Teams Workflows and Power Automate Errors

Tired of Microsoft Teams workflows and Power Automate errors halting your productivity? Get step-by-step solutions to common issues like authentication failures, timeouts, and flow errors. Fix them in minutes and automate effortlessly!

Troubleshooting Microsoft Teams Download Error on Macbook

Troubleshooting Microsoft Teams Download Error on Macbook

Facing Microsoft Teams "Download Error" on MacBook? Discover proven troubleshooting steps to resolve download failures quickly, from cache clears to reinstalls, and get back to smooth teamwork.

Troubleshooting Microsoft Teams Where is Teams Folder Error

Troubleshooting Microsoft Teams Where is Teams Folder Error

Tired of the frustrating Microsoft Teams "Where is Teams" Folder Error? Discover proven, step-by-step troubleshooting fixes to resolve it quickly and restore smooth teamwork. Latest methods included!

How to Fix Microsoft Teams JavaScript Error on Desktop App

How to Fix Microsoft Teams JavaScript Error on Desktop App

Frustrated by Microsoft Teams JavaScript Error on desktop app? Discover proven steps to fix it fast: clear cache, update, reset, and reinstall. Get back to seamless collaboration in minutes!

How to Fix Microsoft Teams Guest Login Error

How to Fix Microsoft Teams Guest Login Error

Struggling with Microsoft Teams "Guest Login" Error? Discover step-by-step fixes, from quick cache clears to admin settings, to resolve guest access issues fast and collaborate seamlessly. Updated with the latest tips!

How to Fix Microsoft Teams For PC Download Error

How to Fix Microsoft Teams For PC Download Error

Tired of the Microsoft Teams "For PC" download error blocking your work? Follow our proven, step-by-step guide to resolve it quickly and get Teams running smoothly on your PC today.

Solving Microsoft Teams Windows 7 Login Error

Solving Microsoft Teams Windows 7 Login Error

Struggling with Microsoft Teams "Windows 7" login error? Discover step-by-step fixes for this frustrating issue on Windows 10/11. Clear cache, edit registry, and more – get back to seamless collaboration today!

How to Fix Microsoft Teams Error Code 0x80070005 (2026 Guide)

How to Fix Microsoft Teams Error Code 0x80070005 (2026 Guide)

Tired of Microsoft Teams Error Code 0x80070005 blocking your meetings? Follow this 2026 guide with step-by-step fixes for access denied issues. Get Teams running smoothly in minutes!

How to Install the Microsoft Teams Add-in for Outlook 2026

How to Install the Microsoft Teams Add-in for Outlook 2026

Master the installation of the Microsoft Teams Add-in for Outlook 2026 effortlessly. Boost your productivity with seamless scheduling and meetings. Follow our proven, up-to-date steps for instant success!

How to Fix Microsoft Teams License Error 2026

How to Fix Microsoft Teams License Error 2026

Struggling with Microsoft Teams "License Error" 2026? Discover proven, step-by-step solutions to resolve it fast. Clear cache, check licenses, and get back to seamless collaboration—no IT help needed!

The Best Exercises for 50+

The Best Exercises for 50+

Whether youre in your 50s, 60s, or even 70s, its not too late to prioritize your health and put yourself first. Here are the best exercises for people 50 and older.

Solving Microsoft Teams Error Caa50024 on Windows 10/11

Solving Microsoft Teams Error Caa50024 on Windows 10/11

Struggling with Microsoft Teams Error Caa50024 on Windows 10/11? Follow our step-by-step fixes to resolve crashes and launch issues quickly. Latest proven solutions for seamless teamwork.