Explore Capsules

Frequent mandatory password changes without evidence of compromise reduce security by encouraging weaker, predictable passwords and harming usability. Instead, relying on risk-based triggers for password resets combined with multi-factor authentication and longer, complex passwords provides stronger protection. You will learn when to reset passwords appropriately and how to align your practices with NIST SP 800-63B recommendations for improved account security.