What does current NIST guidance say about forced periodic password rotation?
- A It is discouraged because it produces predictable passwords and reuse
- B It should occur every 30 days
- C It should occur weekly
- D It is required for all systems
Answer
It is discouraged because it produces predictable passwords and reuse
Longer passphrases, checking against breach lists, and MFA give better security with less user friction.





