Educause Security Discussion mailing list archives

Re: Current Best Practice regarding Password Change policy


From: Barbara Deschapelles <deschapellesb () CLARKSTATE EDU>
Date: Sat, 25 Sep 2010 12:21:54 -0400

Thanks to all of your who took time to answer my question.  The discussion has been interesting and I truly appreciate 
all the thoughtful responses.  


There was significant support for a tiered structure (more frequent for more critical systems/people,) also significant 
arguments against password aging, and plenty of support for the 90 -~ 122 day ranges.  


Thanks again,


Barb


Current thread: