NIST Revamps Password Guidelines to Boost Security and Simplify User Experience

The National Institute of Standards and Technology (NIST) has proposed changes to password guidelines to simplify password creation and improve security. The new recommendations suggest moving away from complex password requirements and frequent changes, which can lead to poor management practices. Instead, NIST encourages using longer, memorable phrases and changing passwords only when there is evidence of a breach. Additionally, NIST advocates for the use of password managers to help generate and securely store unique passwords, thereby promoting better password hygiene and overall cybersecurity.

Opens on Ars Technica