Password policy

["Kellogg, Brian D." <bkellogg () SBU EDU>]

A couple questions:

 

1.      Do most enforce password expirations?  I came from a large
corporation and they enforced a 90 day password expiration policy.  It
seemed to have the effect of making passwords less secure as most would
write them down in obvious places.
2.      Do most enforce a strong password policy?
3.      Any other recommendations/insights along this line would be
helpful.

 

 

 

Thanks,

 

Brian