Milk Still Expires, but Now — Mercifully — Your Passwords Won’t

Photo by Thomas Andreas / Shutterstock.com

Who hasn’t been interrupted during some important task by a strictly-imposed network requirement to “update” a password? And who hasn’t solved this modern annoyance by some ridiculous, unsafe naming convention like “CorpPassword1 … CorpPassword2 … CorpPassword3” and so on?

People already have 150 or so passwords they must remember. Forced expiration made this already untenable situation even worse — 150 new passwords every month or so?

Those days are, thankfully, coming to a close. Last year, the National Institute of Standards and Technology revised its passwords recommendations, urging companies to abandon forced expirations. And recently, Microsoft announced it would remove the requirement from Windows 10 standards.

This will finally start a movement to drop forced password updates.

In its announcement, Microsoft was both logical and forceful in its argument.

“Periodic password expiration is an ancient and obsolete mitigation of very low value,” it said. “When humans are forced to change their passwords, too often they’ll make a small and predictable alteration to their existing passwords, and/or forget their new passwords.”

If a password is compromised, it should be changed now — why wait 30 or 60 days? — and if it’s not compromised, why create the extra hassle?

More from Microsoft:

“If it’s a given that a password is likely to be stolen, how many days is an acceptable length of time to continue to allow the thief to use that stolen password? The Windows default is 42 days. Doesn’t that seem like a ridiculously long time? Well, it is, and yet our current baseline says 60 days — and used to say 90 days — because forcing frequent expiration introduces its own problems.

And if it’s not a given that passwords will be stolen, you acquire those problems for no benefit. Further, if your users are the kind who are willing to answer surveys in the parking lot that exchange a candy bar for their passwords, no password expiration policy will help you.”

Gartner cybersecurity analyst Avivah Litan called the move a “most welcome step.”

“Finally, a big tech company (that manages much of our daily authentication) is using independent reasoned thinking rather than going along with the crowd mentality when the crowd’s less-secure password management practices are — however counterintuitive — less secure,” she wrote in a blog post.

What should companies be doing about passwords instead? Litan hopes this step signals the beginning of the end of traditional passwords. Meanwhile, Microsoft hints at what better security looks like:

“What should the recommended expiration period be? If an organization has successfully implemented banned-password lists, multi-factor authentication, detection of password-guessing attacks, and detection of anomalous logon attempts, do they need any periodic password expiration? And if they haven’t implemented modern mitigations, how much protection will they really gain from password expiration?”

Coincidentally, this week’s “So, Bob” podcast deals with password managers. Listen on iTunes or on Stitcher.

More from Bob Sullivan:

What’s your take on this news? Sound off by commenting below or on Money Talks News’ Facebook page.

Disclosure: The information you read here is always objective. However, we sometimes receive compensation when you click links within our stories.

Read Next
7 Reasons Not to Move When You Retire
7 Reasons Not to Move When You Retire

Sunny skies and warm breezes sound great. But in reality, you might be better off retiring closer to home.

Have You Heard of This Best Place to Retire in 2020?
Have You Heard of This Best Place to Retire in 2020?

The best place to retire in America is one you likely are not familiar with.

7 Things I Never Buy at Costco
7 Things I Never Buy at Costco

A bulk buy isn’t always the best buy.

10 Types of Retirement Income That Are Not Taxable
10 Types of Retirement Income That Are Not Taxable

There are lots of things Uncle Sam can’t touch — so long as you play by the rules.

7 Ways to Shop at Costco Without a Membership
7 Ways to Shop at Costco Without a Membership

You don’t necessarily need to join to get in on the warehouse store’s savings.

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Most Popular
7 Kirkland Signature Items to Avoid at Costco
7 Kirkland Signature Items to Avoid at Costco

Even if it seems you save a bundle buying Costco’s Kirkland Signature brand products, they may not be the bargain they appear to be.

How to Buy Gas At Costco Without a Membership
How to Buy Gas At Costco Without a Membership

The warehouse club often has some of the cheapest gas in town. Here’s how you can get it as a nonmember.

10 Things to Stop Buying If You Want a Clutter-Free Home
10 Things to Stop Buying If You Want a Clutter-Free Home

If you like to keep things simple, avoid these purchases.

If You Find This Thrift Shopping, Buy It
If You Find This Thrift Shopping, Buy It

Vacuums from this brand can last a half-century, if not longer — and they’re hot on the resale market.

A Simple Way to Silence Robocalls Today
A Simple Way to Silence Robocalls Today

A few steps can keep your phone from ringing when a spammer calls.

This Company Makes the Best Tires in America
This Company Makes the Best Tires in America

Driver satisfaction with tires is at an all-time high, but one brand stands out.

Can I Switch to Spousal Social Security Benefits When My Ex Dies?
Can I Switch to Spousal Social Security Benefits When My Ex Dies?

Knowing when to claim can help you maximize benefits.

36 Things That Will Be Obsolete Soon
36 Things That Will Be Obsolete Soon

The writing is on the wall for dozens of things we have grown up with.

This Health Issue Can Hint at Dementia Years in Advance
This Health Issue Can Hint at Dementia Years in Advance

One type of pain is especially associated with cognitive decline.

8 Things You Should Always Buy on Amazon
8 Things You Should Always Buy on Amazon

The giant retailer shines when it comes to these things, from basics to hard-to-find specialty goods.

Medicare Will Not Cover These 6 Medical Costs
Medicare Will Not Cover These 6 Medical Costs

Don’t let these health care expenses catch you off guard in retirement.

8 Federal Income Tax Breaks for Homeowners
8 Federal Income Tax Breaks for Homeowners

Some of these deductions and credits are available to a wide swath of homeowners.

5 Ways to Get Amazon Prime for Free
5 Ways to Get Amazon Prime for Free

Hesitant to drop $119 a year on an Amazon Prime membership? Here’s how to get it for free.

3 Ways to Get Microsoft Office for Free
3 Ways to Get Microsoft Office for Free

With a little ingenuity, you can cut Office costs to zero.

5 Ways to Fill Your Pantry With Free Food
5 Ways to Fill Your Pantry With Free Food

Anyone can take advantage of these resources.

10 Deep Discounts Available on Amazon This Friday
10 Deep Discounts Available on Amazon This Friday

These items are steeply discounted — but the deals won’t last long.

6 Reasons You Should Stop Hiding Cash at Home
6 Reasons You Should Stop Hiding Cash at Home

Stashing money around the house is anything but harmless.

17 Surprising Things You Can Sell for Extra Money
17 Surprising Things You Can Sell for Extra Money

You probably don’t realize these items are worth decent cash.

5 Products You Should Never Buy Generic
5 Products You Should Never Buy Generic

Sometimes the brand-name version is clearly superior.

View More Articles

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Add a Comment

Our Policy: We welcome relevant and respectful comments in order to foster healthy and informative discussions. All other comments may be removed. Comments with links are automatically held for moderation.