Skip to main content

Want some security advice? Don’t reset your passwords too often

Setting your password as “password” has long been dinged as a sure-fire way to invite trouble when it comes to your digital privacy. And obviously, if you’re using the same password for everything on the Internet, you may be in trouble. But while security firms have long discussed the common pitfalls of online security, another practice that may seem solid in theory is now being warned against as well. On Thursday, in observance of World Password Day, the U.K. government urged its citizens not to change their passwords too frequently, claiming that this practice is actually more harmful than it is helpful.

“In 2015, we explicitly advised against it [changing passwords],” British intelligence and security organization GCHQ’s Communications-Electronics Security Group (CESG) wrote recently. “This article explains why we made this (for many) unexpected recommendation, and why we think it’s the right way forward.”

Recommended Videos

So what’s the issue with constantly changing things up? According to the organization’s 16-page report, repeatedly resetting your codes “doesn’t take into account the inconvenience to users.” A secure password, CESG notes, should be both long and random, which makes them fundamentally difficult to remember. And while you can create and remember a few long and random strings, it’s hard to do this for dozens of passwords. “When forced to change [a password], the chances are that the new password will be similar to the old one,” security experts warn. “Attackers can exploit this weakness.”

Please enable Javascript to view this content

CESG also notes that frequent change can be rather counterproductive — in order to remember new strings, users may end up writing them down or storing them in other unsafe ways. There’s also the stronger possibility of forgetting the new password and being locked out of an account, forcing users to find a new password yet again.

“It’s one of those counter-intuitive security scenarios; the more often users are forced to change passwords, the greater the overall vulnerability to attack,” CESG concludes. “What appeared to be a perfectly sensible, long-established piece of advice doesn’t, it turns out, stand up to a rigorous, whole-system analysis.”

Lulu Chang
Former Digital Trends Contributor
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
I tested Intel’s Core i5-14600K against its cheaper sibling. Don’t waste your money
Intel Core i5-13600K installed in a motherboard.

Intel's new Core i5-14600K isn't a massive generational leap, as you can read in our Core i5-14600K review. No one expected it to be with Intel's 13th-gen CPUs already sitting among the best processors. The bigger question is if it's worth buying over last-gen's Core i5-13600K considering that both are readily available for around the same price.

I've tested both chips extensively across a range of productivity and gaming scenarios. The Core i5-14600K brings some minor improvements over its last-gen counterpart, but those looking to stretch their dollar the furthest are better off sticking with the Core i5-13600K.
Pricing and availability
An Intel 13th-generation 13600K Jacob Roach / Digital Trends

Read more
AMD might still have some next-gen GPUs left in the tank — but I don’t buy it
AMD RX 7600 on a pink background.

AMD has said it's done with new GPU dies, but a filing with the European Economic Commission (EEC) suggests that Team Red could still launch graphics cards in its RX 7000 range.

The filing points to AMD releasing an RX 7600 XT sometime in the future, both in 12GB and 10GB variants. AMD's Scott Herkelman says the RDNA 3 lineup is "complete," so what gives? It comes down to the GPU dies.

Read more
I don’t want a touchscreen MacBook, but this feature could convince me
A person typing on a MacBook Pro while sat on a wooden bench.

Rumors that Apple is making a touchscreen Mac are about as old as the Steve Jobs adage that touchscreen laptops suck and make your arm ache. But a fresh patent shows Apple is still working on the idea -- and this time the company might have finally perfected it.

As spotted by Patently Apple, the patent describes how a touchscreen Mac could incorporate haptic feedback into its display. That means you could get small tactile taps every time you press on the screen, which would subtly let you know that your actions have been recognized.

Read more