Evolution of Password Expiry in Companies: Measuring the Adoption of Recommendations...
summary
BSI removes password expiry from guidelines in 2020 and three follow‑up surveys (n = 52, 63, 80) measure company practice and show a clear shift: minimum lengths increase while mandatory rotations drop from about 70% in 2019 to 45% still use password expiry in 2023. Participants are recruited via BSI newsletter and report reasons for keeping expiry (perceived security, external mandates) or failing to adopt compromise checks (technical difficulty, lack of resources), with some using leaked‑password services like Have I Been Pwned.
AI-written summary · about
chapters (7)
- 0:00Password expiry evolution study
- 1:16Data collection phases
- 2:18Password policy elements
- 4:22Password expiry trends
- 6:09Reasons for password expiry
- 8:40Checking compromised accounts
- 10:26Challenges and future research
related talks
01h 05mPasswords are not going away
23mImplementing "password never expires"
46mRequiem for the Password
05mPlease do not use !?_ or your License Plate Number: Analyzing Password Policies in
31mBreaking Bad (Passwords)
25mPasswords Still? New Data on Consumer Authentication Habits
23mFantastic Passwords and Where to Find Them
25mThe Rewards and Costs of Stronger Passwords in a University: Linking Password Lifetime to Strength