7 password rules security experts live by in 2025 - the last one might surprise you
Briefly

The National Institute of Standards and Technology (NIST) has released simplified guidelines for cybersecurity, aimed at small businesses and managers. These include recommendations on effective password practices to enhance protection against cyber threats. Their ongoing efforts to improve the Digital Identity Guidelines, gathering feedback from professionals, ensure evolving relevance in an increasingly complex digital security landscape. In parallel, the Cybersecurity & Infrastructure Security Agency (CISA) offers straightforward resources targeted at consumers to help them navigate common cybersecurity threats. Together, these initiatives are crucial for building a robust defense against cyberattacks.
According to NIST, a strong password should be at least 15 characters long and composed of a mix of upper and lower-case letters, numbers, and symbols.
The Cybersecurity & Infrastructure Security Agency (CISA) offers accessible guidelines for consumers to help them identify threats and protect themselves online.
The ongoing feedback from professionals will shape future editions of the Digital Identity Guidelines, ensuring they remain relevant to contemporary cybersecurity challenges.
Regularly changing passwords is under scrutiny; new guidelines suggest that strong, unique passwords are often more effective than frequent changes.
Read at ZDNET
[
|
]