World Password Day is May 7. We've updated our guidance to reflect newer techniques and knowledge, ranging from passwords, passphrases, passkeys, and more.
NIST and the UK's NCSC currently recommend not enforcing frequent password changes, and instead to use longer passphrases over shorter passwords. We take a look at the math to see what really makes sense, and arrive at some straightforward suggestions.