It might seem somehow better in sense that the institution is enforcing to change passwords at some periodic interval. However, if the user is changing the passwords in the interval, but is always leaving a patter behind his changes, then it makes no sense of changing the passwords. Its more serious threat instead. The user feels he/she has changed his/her last passwords and feels safe. and the attacker is always getting a clue to the password.
-
The best way is always to suggest the service provider to implement a better and safer algorithm then asking for its end users to reset the goddammgoddamn password everytimeevery time. If someone is same enough he/she will have in mind that these days we have Single Sign On, and OpenID, where people prefer to login with one accounts rather than remembering different passwords for different websites.
- Despite of all the discussions, its recommended to change your password frequently, But,
On YOUR FREE WILL
A Quick Tip : Use multiple words in your password (The safest marked till date).
