Multiple choice technology security

What is suggested as the leading practice for the maximum length of time before users are forced to change their passwords?

  1. 60 days

  2. 180 days

  3. 120 days

  4. 90 days
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

90 days is traditionally recommended as the maximum interval for forced password changes in many security policies. Shorter intervals like 60 days may cause users to choose weaker passwords or write them down. Longer intervals like 180 days increase exposure time if passwords are compromised.

Keep practicing — related questions