Sophos security researcher says frequent password resets not necessary

We often find people giving advice to ‘change passwords regularly’ to save themselves from complications arising from the data breach. But how effective is it and should you really be doing this? Paul Ducklin, the Principal Research Scientist, Sophos sheds some light on the matter and shares some tips regarding password and account safety.

Changing the password frequently is said to reduce the length of time you’d be exposed if your password were breached, thus making you safer. However, this became known in the jargon as password rotation, which is exactly what it turned into, where users simply cycled through a list of passwords they’d used before, Ducklin said.