The new NIST password guidance

Password Manager Resources

A place for creators and users of password managers to collaborate on resources to make password management better.

Dumb Password Rules

A compilation of sites with dumb password rules.

A Well-Known URL for Changing Passwords

A Well-Known URL for Changing Passwords

Password expiration is dead

Recent scientific research calls into question the value of many long-standing password-security practices such as password expiration policies, and points instead to better alternatives such as enforcing banned-password lists and MFA