Microsoft Says Forced Password Resets Don’t Improve Security

https://www.extremetech.com/wp-content/uploads/2019/06/597521-best-password-managers-768x432.jpg 768w, https://www.extremetech.com/wp-content/uploads/2019/06/597521-best-password-managers-640x360.jpg 640w, https://www.extremetech.com/wp-content/uploads/2019/06/597521-best-password-managers-223x126.jpg 223w, https://www.extremetech.com/wp-content/uploads/2019/06/597521-best-password-managers-106x59.jpg 106w, https://www.extremetech.com/wp-content/uploads/2019/06/597521-best-password-managers-348x196.jpg 348w, https://www.extremetech.com/wp-content/uploads/2019/06/597521-best-password-managers.jpg 810w" sizes="(max-width: 300px) 100vw, 300px" /> For decades, the baseline password practices Microsoft provided to customers suggested forcing employees to change their passwords every 60 days. According to Microsoft’s Aaron Margosis, that technique is an “ancient