Why is password expiration considered a "good security practice"? In addition to the hassle, they also encourage people to use simple passwords (where they only increment a number), or to end up with a Post-It on their monitor because they don't have time to store new passwords more securely.
Notes by e925b1b9 | export