• ozymandias117@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    16 days ago

    NIST’s official password guidelines state you should not have password expiry unless there is evidence of a compromise

      • ozymandias117@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        16 days ago

        The majority of accounts I have don’t have an expiry

        I wouldn’t trust personal data with anything that does - they certainly don’t have any security professionals on staff