Thinking of a secure password is disabled sex videoshard, so demanding a user change it every 60 days fills many with dread and leads to weaker security. Microsoft has realized this and decided to remove default password expiry as a security baseline feature in Windows 10.
When organizations deploy Windows 10 to tens, hundreds, or even thousands of employees, default security out the box is very important. That's why Microsoft provides Windows security baselines, which consist of a group of Microsoft-recommended configuration settings that can be relied upon to provide a more secure operating system.
As part of the baseline, Microsoft in the past stipulated a 60-day password expiration policy, which meant every user was forced to change their password every couple of months (unless an organization changed the configuration). As Ars Technica reports, with the release of Windows 10 v1903, password expiration is being dropped from the baseline because it's actually detrimental to security.
Microsoft explains in its latest draft security baseline for Windows that, "When humans are forced to change their passwords, too often they'll make a small and predictable alteration to their existing passwords, and/or forget their new passwords ... Periodic password expiration is a defense only against the probability that a password (or hash) will be stolen during its validity interval and will be used by an unauthorized entity. If a password is never stolen, there's no need to expire it."
Microsoft also points out that if a password is stolen, the thief has up to 60 days to use it based on this expiration policy, which is ample time to gain entry to a system and cause chaos. So on every level, password expiration simply doesn't work, which is why it's disappearing.
Passwords still need to meet a minimum length requirement, be complex enough so as not to be easily guessed, not have been used before, and stored securely. It may still be the case that individual organizations enforce their own expiration policy, but it seems likely the demand for a new password every few months will impact far fewer workers going forward, and that's a good thing for both their sanity and security.
Topics Microsoft
(Editor: {typename type="name"/})
NYT Connections hints and answers for December 19: Tips to solve 'Connections' #557.
Woman destroys Donald Trump in merciless Twitter rant
The NFL is way overthinking this GIF thing
Hire someone to make your wedding hashtag because #itshardtobeclever
Robert Irwin weighed in on the 100 men vs one gorilla debate
Yes, there are legit ways to make money without leaving your house
'Trumpgrets' is the Tumblr page for Trump supporters who just can't take him anymore
Muslim comedian casually grills Eric Trump on flight to Scotland
Best power station deal: Save $200 on Jackery bundle
Followers await news after Syrian girl's Twitter account deleted
25 TikTok, YouTube and Instagram creators who made it to TV, movies
FlipSid3 Tactics tears through losers bracket to win 'Rocket League' Championship Series
接受PR>=1、BR>=1,流量相当,内容相关类链接。