Comment NCSC guideline: no password expiry (Score 1) 498
Contrary to many common password policies the UK National Cyber Security Centre (https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fwww.ncsc.gov.uk%2Farticles%2Fproblems-forcing-regular-password-expiry) recommends passwords should never expire. Problem with password expiry is that it is not usable, since people having to make new passwords all the time choose weaker passwords.