Microsoft Says Forced Password Resets Don’t Improve Security

For decades, the baseline password practices Microsoft provided to customers suggested forcing employees to change their passwords every 60 days. According to Microsoft's Aaron Margosis, that technique is an "ancient and obsolete mitigation of very low value."

The post Microsoft Says Forced Password Resets Don’t Improve Security appeared first on ExtremeTech.

from ExtremeTechExtremeTech https://www.extremetech.com/computing/292534-microsoft-says-forced-password-resets-dont-improve-security