Milk Still Expires, but Now — Mercifully — Your Passwords Won’t

Photo by Thomas Andreas / Shutterstock.com

Who hasn’t been interrupted during some important task by a strictly-imposed network requirement to “update” a password? And who hasn’t solved this modern annoyance by some ridiculous, unsafe naming convention like “CorpPassword1 … CorpPassword2 … CorpPassword3” and so on?

People already have 150 or so passwords they must remember. Forced expiration made this already untenable situation even worse — 150 new passwords every month or so?

Those days are, thankfully, coming to a close. Last year, the National Institute of Standards and Technology revised its passwords recommendations, urging companies to abandon forced expirations. And recently, Microsoft announced it would remove the requirement from Windows 10 standards.

This will finally start a movement to drop forced password updates.

In its announcement, Microsoft was both logical and forceful in its argument.

“Periodic password expiration is an ancient and obsolete mitigation of very low value,” it said. “When humans are forced to change their passwords, too often they’ll make a small and predictable alteration to their existing passwords, and/or forget their new passwords.”

If a password is compromised, it should be changed now — why wait 30 or 60 days? — and if it’s not compromised, why create the extra hassle?

More from Microsoft:

“If it’s a given that a password is likely to be stolen, how many days is an acceptable length of time to continue to allow the thief to use that stolen password? The Windows default is 42 days. Doesn’t that seem like a ridiculously long time? Well, it is, and yet our current baseline says 60 days — and used to say 90 days — because forcing frequent expiration introduces its own problems.

And if it’s not a given that passwords will be stolen, you acquire those problems for no benefit. Further, if your users are the kind who are willing to answer surveys in the parking lot that exchange a candy bar for their passwords, no password expiration policy will help you.”

Gartner cybersecurity analyst Avivah Litan called the move a “most welcome step.”

“Finally, a big tech company (that manages much of our daily authentication) is using independent reasoned thinking rather than going along with the crowd mentality when the crowd’s less-secure password management practices are — however counterintuitive — less secure,” she wrote in a blog post.

What should companies be doing about passwords instead? Litan hopes this step signals the beginning of the end of traditional passwords. Meanwhile, Microsoft hints at what better security looks like:

“What should the recommended expiration period be? If an organization has successfully implemented banned-password lists, multi-factor authentication, detection of password-guessing attacks, and detection of anomalous logon attempts, do they need any periodic password expiration? And if they haven’t implemented modern mitigations, how much protection will they really gain from password expiration?”

Coincidentally, this week’s “So, Bob” podcast deals with password managers. Listen on iTunes or on Stitcher.

More from Bob Sullivan:

What’s your take on this news? Sound off by commenting below or on Money Talks News’ Facebook page.

How to find cheaper car insurance in minutes

Getting a better deal on car insurance doesn't have to be hard. You can have The Zebra, an insurance comparison site compare quotes in just a few minutes and find you the best rates. Consumers save an average of $368 per year, according to the site, so if you're ready to secure your new rate, get started now.

Read Next
8 Amazon Picks Under $30 for Coffee Lovers
8 Amazon Picks Under $30 for Coffee Lovers

We’ve brewed up a list of amazing Amazon products that are sure to perk you up.

10 Purchases You Should Not Put on a Credit Card
10 Purchases You Should Not Put on a Credit Card

Credit cards offer many conveniences and protections, but sometimes it’s simply smarter to keep the plastic tucked away.

10 Products That Upgrade Your Home for Less Than $45
10 Products That Upgrade Your Home for Less Than $45

Make a fresh start with these affordable Amazon buys.

15 Ways Retirees Can Make Their Savings Last Longer
15 Ways Retirees Can Make Their Savings Last Longer

Study these strategies to make your golden years gleam.

12 Products to Keep Your Car Clean and Organized
12 Products to Keep Your Car Clean and Organized

These items will help put your vehicular mess to rest — and each is available for less than $20 on Amazon.

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Most Popular
This Gas Station Scam Is Victimizing More Drivers
This Gas Station Scam Is Victimizing More Drivers

For the second straight year, a growing number of Americans believe they’ve fallen prey to this scam.

7 Ways to Boost Your Credit Score Fast
7 Ways to Boost Your Credit Score Fast

Your financial security might soon depend upon the strength of your credit score.

7 Unusual Ways to Declutter Your Home
7 Unusual Ways to Declutter Your Home

Tired of possessions weighing you down? Here are seven ways to declutter painlessly and effectively.

This Is the Most Popular Age for Claiming Social Security
This Is the Most Popular Age for Claiming Social Security

Both men and women are most likely to start receiving Social Security benefits at this age.

21 Things You Should Always Buy at a Dollar Store
21 Things You Should Always Buy at a Dollar Store

Dollar stores have great bargains on both everyday and occasional purchases.

6 Things You Should Never Buy at Trader Joe’s
6 Things You Should Never Buy at Trader Joe’s

We love Trader Joe’s for plenty of reasons. But think twice about this handful of products.

Could You Give Up These 7 Expenses to Save Thousands of Dollars a Year?
Could You Give Up These 7 Expenses to Save Thousands of Dollars a Year?

You could save more than $30,000 by setting aside these costly expenses for just one year.

Don’t Toss These 7 Household Items — Sell Them
Don’t Toss These 7 Household Items — Sell Them

Here’s how to earn cash as you give new life to these unwanted items.

6 Legal Documents Retirees Need — but Don’t Have
6 Legal Documents Retirees Need — but Don’t Have

Few retirees have these documents that are crucial to their golden years — especially during a pandemic.

19 High-Paying Jobs You Can Get With a 2-Year Degree
19 High-Paying Jobs You Can Get With a 2-Year Degree

These jobs pay more than the typical job in the U.S. — and no bachelor’s degree is required.

Eat This Food If You Want to Avoid Alzheimer’s Disease
Eat This Food If You Want to Avoid Alzheimer’s Disease

One type of food associated with the Mediterranean diet offers especially large benefits.

5 Awesome Places You Can Retire Overseas on $2,000 a Month or Less
5 Awesome Places You Can Retire Overseas on $2,000 a Month or Less

In this week’s podcast: tips on retiring overseas — from someone who’s been helping American expats for decades.

11 Expenses That Quietly Drain Your Wallet
11 Expenses That Quietly Drain Your Wallet

It’s scandalously easy to overspend in these areas of your life.

9 Dumb Ways You Are Ruining Your Home Value
9 Dumb Ways You Are Ruining Your Home Value

Homeowners, beware these mistakes that can drive away potential buyers.

18 Amazon Purchases That We Are Loving Right Now
18 Amazon Purchases That We Are Loving Right Now

These practical products make everyday life a little easier.

7 Tips for Building an Emergency Stockpile
7 Tips for Building an Emergency Stockpile

A pandemic or natural disaster could leave you reliant on your existing food supply. Is your pantry prepared?

3 Ways to Get Microsoft Office for Free
3 Ways to Get Microsoft Office for Free

With a little ingenuity, you can cut Office costs to zero.

15 Outrageously Overpriced Products — and How to Save on Them
15 Outrageously Overpriced Products — and How to Save on Them

Retailers mark up products by hundreds of times their cost — but you don’t have to pay the premium.

Why Half of Retirees Now Owe Taxes on Social Security
Why Half of Retirees Now Owe Taxes on Social Security

Growing numbers of seniors are paying taxes on their Social Security benefits, but you might be able to avoid this fate.

View More Articles

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Add a Comment

Our Policy: We welcome relevant and respectful comments in order to foster healthy and informative discussions. All other comments may be removed. Comments with links are automatically held for moderation.