Password Expiration

Noun · Security & Infosec

Definitions

  1. A policy requiring passwords to be changed after a set period of time, whether or not compromise is known. Password expiration remains common in some regulated or legacy environments, though many modern security programs limit its use because forced frequent changes can lead to weaker habits.

    In plain English: A rule that makes users change passwords after a certain amount of time.

    Example: "The legacy domain still enforced password expiration every sixty days even though MFA had reduced the original threat model."

Related Terms