Skip to main content
Andrew Neil
Andrew Neil
Super User
Jul 6, 2026 6:41 PM UTC
Question

Don't force periodic password expiry.

Periodic password expiry is now widely recognised as counterproductive; eg, from the UK National Cyber Security Centre:

The problems with forcing regular password expiry

 

Please stop this:

 

Especially as it does allow you to just “reset” your password to exactly the same as it was before!

    2 replies

    Laurids_PETERSEN
    Laurids_PETERSEN
    ST Community Manager
    Jul 10, 2026 10:52 AM UTC

    Hi ​@Andrew Neil,

    Thanks for providing your feedback. I will forward it to the respective team.

      Andrew Neil
      Andrew NeilAuthor
      Super User
      Jul 10, 2026 11:17 AM UTC

      ​@Laurids_PETERSEN  - thanks.

       

      Note that we’ve been here before:

       

      A complex system that works is invariably found to have evolved from a simple system that worked.A complex system designed from scratch never works and cannot be patched up to make it work.
      Terms & ConditionsAccessibility statement