It's time to stop asking users for periodic password changes

Image: Santeri Viinamäki [CC BY-SA 4.0], via Wikimedia Commons

Ars Technica outlines the case for a policy that might sound counter-intuitive at first: not forcing password rotation. Read the rest