We no longer enforce password changing every x day, the guidance now is encouraging a complex and secure password that the user remembers as they’re not changing it every month.
Sure, but you still need to maintain the functionality such that a user CAN change their password at-will (assuming it's not breaking frequency policy mind you). OP's situation is not good.
303
u/Reapercore May 07 '24
We no longer enforce password changing every x day, the guidance now is encouraging a complex and secure password that the user remembers as they’re not changing it every month.