"change password frequently"

[libert19]

It's one of recommended security measures but I find it stupid. Imo, as long as your original password is strong enough, you do not need look at it ever again.


Do you change your passwords often? If no, have you been hacked?

What's your opinion on this security measure?

[1714997600]

1714997600

[1714997600]

1714997600

[1714997600]

1714997600

[1714997600]

1714997600

[EL MOHA]

One of the reason of changing your password regularly doesn’t necessarily mean to avoid getting hack but you might also forget it. Imagine you been logged into this account for so long like a year and something happens to your device which it was logged in, there is possibility that you might have forgotten it since you don’t actually use it often. This is similar to having your accounts saved on password keyloggers too.

Also an hacker might actually be in case trying to break down your period, changing it might make it harder for him to break. Although the regular Changing doesn’t mean something like few weeks, you can make a yearly thing

[_act_]

Why asking this question? You can do whatever with your password. If you like, use a strong password and do not change it. If you like, change it periodically.

It is good to stake your bitcoin address for account ownership claiming. This is what that is most important to me.

One of the reason of changing your password regularly doesn’t necessarily mean to avoid getting hack but you might also forget it

You can backup the password on a book offline. There is also email for recovery. If you do not backup the new password, you can also forget it.

[The Sceptical Chymist]

I am admittedly no cybersecurity expert, but I think it's dumb, dumb, dumb--and when employers or various websites require that you do it, it's so goddamn annoying.

And I agree with you that (in the vast majority of cases I'd imagine) choosing a strong enough password the first time should obviate the need to keep changing it.  It always made me wonder if the requirement to periodically switching passwords increases the frequency of forgetting/losing them.  Some folks have all of their passwords written down in a single place, like a notebook or in multiple places, and I'm pretty sure that can get chaotic.

Can you imagine if every single thing you had to have a password for required that?  I think my brain would explode; this issue isn't a major pet peeve in my life, but it's one that's bugged me in the past.  Thanks for beginning my morning with some low-level aggravation, OP.  (lol)

[tranthidung]

It's one of recommended security measures but I find it stupid. Imo, as long as your original password is strong enough, you do not need look at it ever again.


Do you change your passwords often? If no, have you been hacked?

What's your opinion on this security measure?

May I ask you, who advised that?

As far as I know, forum does not recommend it.

Choose password:

For best security, you should use six or more characters with a combination of letters, numbers, and symbols.

It is the forum advise that you will see at your profile page, Account related settings. No point about changing password frequently.

I know some platforms, applications recommend it or even force their users to do it after a while like 6 months. However, it is non sense if a person changes from a weak password to a new weak password that only has some minor difference at the end.

Changing from "mypassword@2022" to "mypassword@2023" does not improve security.

[PX-Z]

It's for security recommendations so i won't call it stupid for being cautious, or having the idea to make your account secured. Actually getting hacked is more stupid than changing passwords.

[Shishir99]

Do you change your passwords often? If no, have you been hacked?

No, I do not change passwords often. I have been hacked before but it was long ago. My ETH wallet was hacked as well which is why I stake my Bitcoin address in the forum. Since then I have started using stronger passwords and always use a mixture of special characters, numbers, capital letters, and small letters. There is a chance of forgetting the new password as well. I have seen people changing their Android device pattern lock too many times and they had to reset the device because they forgot what pattern they have used. If you change your password too many times, you will get confused with too many passwords and won't be able to remember which one was the correct one.

[pinggoki]

Yes, that's the kind of mindset that will definitely make the hackers work much easier but that doesn't mean that not changing passwords often is a wrong thing too, if you're like me who sets the computer environment in a way that is really difficult for hackers to get into then you're good with not changing passwords but if you are the kind that's carelessly clicking on links sent by unknown senders in your email or messaging apps then you can benefit from changing passwords frequently although it's hopeless as most hackers will just install a keylogger and their work on you is already done.

[libert19]

One of the reason of changing your password regularly doesn’t necessarily mean to avoid getting hack but you might also forget it

You can use password managers, so you only have to remember one password.

Your comment was motivation behind this post, nonetheless, I have read articles and tweets recommending this and my local banks forcing this measure.

@tranthidung it isn't exactly forum related question, although its posted in meta.

[un_rank]

Do you change your passwords often? If no, have you been hacked?

What's your opinion on this security measure?

I do not change my password often and have never been hacked.

I do not think people need to change their passwords at all if you chose a secure mix of characters. You just need to have a secure back up for it. The only upside to changing your password could be to log out any unauthorized access to your account. A hacker can get your email and password and be accessing your account with you without changing anything, if you change your password, they will be logged out.

One of the reason of changing your password regularly doesn’t necessarily mean to avoid getting hack but you might also forget it. Imagine you been logged into this account for so long like a year and something happens to your device which it was logged in, there is possibility that you might have forgotten it since you don’t actually use it often.

You should not rely on memory to remember sensitive passwords and other information. Backing up different passwords at different times can also get confusing, other than that, it is a safe process and could provide more security.

- Jay -

[Gladitorcomeback]

It's one of recommended security measures but I find it stupid. Imo, as long as your original password is strong enough, you do not need look at it ever again.

Only strong password is not enough because there are still other ways our password could ne compromised. If your browser saved accounts password automatically and you Gmail account compromised then hacker will easily access to your account. malware attack which copy all your keystroke could also leads to password leak. there will be more way which we don't know yet but I think we shouldn't called this term as a stupid as many big exchanges like Binance also recommend to do so

Do you change your passwords often? If no, have you been hacked? 

No, I am rarely do this and still I have not faced any hacking btt account single time. my pc was Hacked and my wallet phrases compromised along with all social accounts and exchanges but so lucky that hackers didn't access to my BTT account. I think hacker don't know the value of Bitcointalk account and was targeting only wallets.

[dzungmobile]

@tranthidung it isn't exactly forum related question, although its posted in meta.

If it is not about forum account password, this thread does not belong to Meta board that is for forum related issues.

You have two options to move it: Beginners & Help; and Off-topic. I saw many topics about security moved to Off-topic.

[Helena Yu]

As long as you can sign a message from your address, you're fine.

Changing password or not,  it's up to personal choice. You can say your password is already strong and wouldn't be hacked, but someone can say it's better to change your password once a year for extra security.

I'm not changing my password because I'm lazy lol.

[Coyster]

If you suspect that your device/account has been compromised, changing your passwords immediately is a must, but there is no need to change your passwords periodically for no reason, so long as you set a strong and unique passwords from the outset.

but someone can say it's better to change your password once a year for extra security.

Changing your password does not give extra security, except you are changing from a weak/overused one to a strong and unique password, but if they are both strong then it is the same security. I think one should just set a strong password and then ensure that they do not do things that would get their device compromised.

[Awaklara]

If you are someone who frequently changes devices, it might be better to regularly change your password. I mean there are some people who also often save their passwords in the browser which is not recommended. If something requires you to sell your device or you replace your device and your old device changes hands, that could be dangerous. especially for those who access it from devices such as smartphones. if we lose the smartphone it can also be bad. and I don't think there's a problem with changing the password.

I also changed the password once when I had to change devices. it's just a precaution.

[knowngunman]

Do you change your passwords often? If no, have you been hacked?

What's your opinion on this security measure?

No! I don't change my password often and I have not been hacked before. Not even in this forum or any other platform before.

One of the reason of changing your password regularly doesn’t necessarily mean to avoid getting hack but you might also forget it. Imagine you been logged into this account for so long like a year and something happens to your device which it was logged in, there is possibility that you might have forgotten it since you don’t actually use it often. This is similar to having your accounts saved on password keyloggers too.

Also an hacker might actually be in case trying to break down your period, changing it might make it harder for him to break. Although the regular Changing doesn’t mean something like few weeks, you can make a yearly thing

Changing password often can cause me to forget my password. Not that I will completely forget the password but I might make several attempts before getting the right one. I always find it surprising whenever someone say that they forgot their password. Unless I wasn't the one that set the password, I don't think I will forget it because I have a pattern I use for my password and they're unique to each sites. Making changes in the password will get me confused in the long run. When your password is strong enough that can not guess, then I don't see much effect on changing it.

[Wapfika]

Do you change your passwords often? If no, have you been hacked?

What's your opinion on this security measure?

I’m not changing my password frequently due my laziness but I don’t find it as useless habit since it can help you to maintain your account security in case you didn’t know that you login your device on unsecured device or being phish unknowingly since many high wrong user here got their account rank without being notice even though they are still active here.

If you are not clicking any random link or login using unsecured device then I guess your account will be safe without changing password frequently. But who knows if when will unknowingly commit mistake since we are all human after all.

[robelneo]

These two combinations are your key to securing your account on all the sites you're in, a very strong password, and making sure that your device is clean from being infected if there's an authentication like a text and a 2FA on the site you're using then, by all means, use it.

Always secure your workstation and make sure no one will use the computer that you're using, when you value something you should know how to properly secure it.
So far I have not changed my passwords for over a year on all the sites I'm in, except when the site asks me to do it for their their updates.

[SmartGold01]

If I am not mistakenly since my signed up here I have never changed my password because my account security is strong enough to last for as many years I feels like without changing since I don't use that password for another thing or even trying to use this same password to sign up other things. There's no need to change password because sometimes changing password easily attracts attention to yourself because lots of people would suspect account has already changed hands or being sold out in my suggestion if you already had a solid and strong password then no need to start littering your profile in the name of choosing a strong security password.

[Shamm]

It's one of recommended security measures but I find it stupid. Imo, as long as your original password is strong enough, you do not need look at it ever again.


Do you change your passwords often? If no, have you been hacked?

What's your opinion on this security measure?

Some user here in the forum didn't change thier password but some users  are change thier password because of security and also they change thier password cause the reason of they don't want to forget cause if your account was login in one device  for s long time there's a chance that you've forgot the password unless you have copy of your password. But anyways it's up to the owners if they will change thier password or not.