7 ms·
What's the threat scenario where forcing a password reset increases security? I'm genuinely curious, because I feel it's often the case that password expiration
by wbeckler 2y ago
What's the threat scenario where forcing a password reset increases security? I'm genuinely curious, because I feel it's often the case that password expirations might introduce more threats than they mitigate.
- dataflow 2y ago> What's the threat scenario where forcing a password reset increases security? I'm genuinely curious, because I feel it's often the case that password expirations might introduce more threats than they mitigate. Not every reset is due to expiration... e.g. if you know a user reused a password from a different service that got hacked on your service, you should probably make them reset it...
- reaperman 2y agoWhen you know that account / those credentials have already been compromised.