Skip to main content
Andrew Neil
Andrew Neil
Super User
July 6, 2026
Question

Don't force periodic password expiry.

  • July 6, 2026
  • 1 reply
  • 37 views

Periodic password expiry is now widely recognised as counterproductive; eg, from the UK National Cyber Security Centre:

The problems with forcing regular password expiry

 

Please stop this:

 

Especially as it does allow you to just “reset” your password to exactly the same as it was before!

    1 reply

    Laurids_PETERSEN
    Laurids_PETERSEN
    ST Community Manager
    July 10, 2026

    Hi ​@Andrew Neil,

    Thanks for providing your feedback. I will forward it to the respective team.

      Andrew Neil
      Andrew NeilAuthor
      Super User
      July 10, 2026

      ​@Laurids_PETERSEN  - thanks.

       

      Note that we’ve been here before:

       

      A complex system that works is invariably found to have evolved from a simple system that worked.A complex system designed from scratch never works and cannot be patched up to make it work.
      Terms & ConditionsAccessibility statement