- Why do administrators ask users to change their password during the first login?
- How often do passwords for general users need to be changed according to policy?
Why do administrators ask users to change their password during the first login?
Forcing users to select their own password at initial logon, (the first time they authenticate), ensures that NOBODY else knows the password for the account once it has been changed. This is a control process called single-control.
How often do passwords for general users need to be changed according to policy?
But how often should you create new passwords? Cybersecurity experts recommend changing your password every three months. There may even be situations where you should change your password immediately, especially if a cybercriminal has access to your account.