Comments on: QotW #1: How does changing your password every 90 days increase security?

By: Havenless

Havenless — Fri, 24 Apr 2015 07:35:59 +0000

If you're compromised, important people will want to know why you didn't follow "industry standard practice".

It's industry standard practice because everyone follows it.

Everyone follows it because it's industry standard practice.

By: MikeInOmaha

MikeInOmaha — Sat, 01 Dec 2012 11:37:26 +0000

While they're all valiant tries, the list of reasons "FOR" is missing it entirely. The sole reason behind the 60/90 day rule is to reduce exposure if a p/w is compromised unknowingly. Once the p/w changes, the intruder will lose their access by way of those credentials at minimum.