Frequent password changes are the enemy of security, FTC technologist says

SSgt Mark Lines
I can't believe someone had to perform a study to figure out everything stated in the article! Good share!

This article re-enforces a notion that I picked up in my various security classes: The more secure a system is, the less user-friendly it is, and the more user-friendly a system is, the less secure it is. In the end, we can only hope to strike a happy medium between the two.

I'd say that the length of the password is still the most important factor. The password should be randomly generated, contain characters, numbers and special characters. That password should not be re-used on any other site. And a service like LastPass will help you to safe all those passwords on their website or on your phone with their app. Basically, I trust Steve Gibson's advice on security (https://www.grc.com/securitynow.htm), and he recommended LastPass as being safe. Having safe passwords seems to be way more important than changing them frequently.