Forcing users to periodically change their passwords should go the way of the dodo according to the US government

SoftwareSecurityForcing users to periodically change their passwords should go the way of the dodo according to the US governmentWhen you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

(Image credit: Chris Ratcliffe/Bloomberg via Getty Images)

Computer code and text displayed on computer screens. Photographer: Chris Ratcliffe/Bloomberg

Passwords are a pain. Just when you’ve got one fully committed to memory, chances are your workplace will force you to throw it away and make a new one, in the name of cybersecurity—and if you’re anything like me, you’ll spend the next few weeks typing in the old one out of habit. Of course, you should be usinga good password managerto keep track, but even then it’s an irritant.

The National Institute of Standards and Technology (NIST) has released the latest version of itsDigital Identity Guidelines, and (rather fittingly) it’s more fiendishly complicated to read than a particularly secure password sequence (viaArs Technica).

Amid the incredibly dry wording, however, is a rule barring the requirement that users periodically change their passwords.

TheNISTis a US federal body that sets the digital standards for governmental agencies, standards organisations and private companies, so when it speaks, plenty listen. As a result, we could finally see our passwords lasting longer for a variety of services, giving us plenty of mental headspace to remember important things like sports scores, and the names of those who have wronged us in the past.

Essentially, the reasoning here seems to be thus: If users are forced to change complicated passwords frequently, they have a tendency to create simpler and simpler versions to make them easier to remember.

Given that most people don’t use a password manager (and this is the point where I’m contractually obliged to glare at you disapprovingly), what was originally “Fl00fyl1ttlekittens#84753j4X))-B” gradually becomes “Floofylittlekittens8”, as it’s easier to remember—and eventually, “cat12345”.

If that happens to be your actual password, I hope I made your stomach drop in terror.

The biggest gaming news, reviews and hardware deals

If you’re in the market for a password manager, I have a few recommendations for the ones we use regularly on the team. There’sBitwardenandProton Pass. Both are open source, easy to use, and come from respectable organisations. Bitwarden is the best for raw functionality, though it’s not the prettiest, while Proton Pass is great if you already have a Proton Mail account.

There’s similar thinking behind the removal of a rule requiring you to add in special characters. Forcing users to think up a difficult to remember sequence essentially encourages them over time to become lazy with their choices, making the passwords gradually easier to crack overall.

The now-standard eight character length minimum requirement is still there, of course, along with a suggestion that fifteen characters in length “should” be a minimum in many circumstances. Seems a little excessive that, but hey, it’s a dangerous cyber-world out there.

So, will we see these new password rules implemented any time soon? Well, unless you’re a US government worker, I doubt it’ll be a quick switchover. Large private organisations often take some time to change,especially when it comes to security infrastructure. Plus, in this case, there’s a cultural element of overturning the long-held belief that frequent password changes make things safer for us all.

Best CPU for gaming: Top chips from Intel and AMD.Best gaming motherboard: The right boards.Best graphics card: Your perfect pixel-pusher awaits.Best SSD for gaming: Get into the game first.

Best CPU for gamingBest gaming motherboardBest graphics cardBest SSD for gaming

Best CPU for gaming: Top chips from Intel and AMD.Best gaming motherboard: The right boards.Best graphics card: Your perfect pixel-pusher awaits.Best SSD for gaming: Get into the game first.

TOPICSHardware

TOPICS

More about security

A still from a YouTube video of Senator Mark Warner speaking

Telecoms hack on US government officials is ‘worst in nations history’ and ‘the barn door is still wide open’ says senator

HDMI cable

LatestThe 11 big FPS games of 2025See more latest►

Latest

The 11 big FPS games of 2025

Doom: The Dark Ages screnshot

The 11 big FPS games of 2025

See more latest►

Most PopularThe Sims begins its 25th anniversary celebration next week with a Behind The Sims episode of news and announcementsPath of Exile 2 numberlord spends 16 straight days killing rare monsters to prove that a stat that makes loot better makes better lootPalestinian developer raises more than $200,000 to make Dreams on a Pillow, a game about the horrors of the 1948 NakbaPiranha Games will lay off employees after Mechwarrior 5: Clans ‘performed below projections’Marvel Rivals’ latest update quietly killed the game’s burgeoning mod sceneSorry everyone, Minecraft 2 is cancelled, and it might be our faultTeam Fortress 2 just had the single biggest trade in its history, with ‘the absolute best hat you can get’ going for around $40KIs the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.Elden Ring: Nightreign is getting a closed network test, and I’m totally not fuming because PC players aren’t invited to the party, or anythingIf you’re a content creator and gamer looking for a CPU upgrade, this Ryzen 9 9900X deal will get you $90 offAMD is now reportedly making all-American Ryzen 9000 CPU dies at TSMC’s Arizona fab

Most Popular

The Sims begins its 25th anniversary celebration next week with a Behind The Sims episode of news and announcements

Path of Exile 2 numberlord spends 16 straight days killing rare monsters to prove that a stat that makes loot better makes better loot

Palestinian developer raises more than $200,000 to make Dreams on a Pillow, a game about the horrors of the 1948 Nakba

Piranha Games will lay off employees after Mechwarrior 5: Clans ‘performed below projections’

Marvel Rivals' latest update quietly killed the game’s burgeoning mod scene

Sorry everyone, Minecraft 2 is cancelled, and it might be our fault

Team Fortress 2 just had the single biggest trade in its history, with ‘the absolute best hat you can get’ going for around $40K

Is the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.

Elden Ring: Nightreign is getting a closed network test, and I’m totally not fuming because PC players aren’t invited to the party, or anything

If you’re a content creator and gamer looking for a CPU upgrade, this Ryzen 9 9900X deal will get you $90 off

AMD is now reportedly making all-American Ryzen 9000 CPU dies at TSMC’s Arizona fab

HARDWARE BUYING GUIDESLATEST GAME REVIEWS1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads2Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop3Best mini PCs in 2025: The compact computers I love the most4Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands5Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested1Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits2Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review—like juggling chainsaws on horseback3WD Black SN850X 8 TB NVMe SSD review4Ikea Utespelare desk review5Asus ROG Harpe Ace Mini wireless mouse review

HARDWARE BUYING GUIDESLATEST GAME REVIEWS

1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

A bunch of the best Steam Deck accessories on a blue background.

1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

2Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop

Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop

3Best mini PCs in 2025: The compact computers I love the most

Best mini PCs in 2025: The compact computers I love the most

4Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands

Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands

5Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested

Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested

1Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits

Thank Goodness You’re Here review

1Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits

Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits

2Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review—like juggling chainsaws on horseback

Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review—like juggling chainsaws on horseback

3WD Black SN850X 8 TB NVMe SSD review

WD Black SN850X 8 TB NVMe SSD review

4Ikea Utespelare desk review

Ikea Utespelare desk review

5Asus ROG Harpe Ace Mini wireless mouse review

Asus ROG Harpe Ace Mini wireless mouse review

The biggest gaming news, reviews and hardware deals#

The biggest gaming news, reviews and hardware deals