Why Your Password Policy Is Costing You Security

Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense · Sep 14, 2026 · 9m · transcript

Most enterprises still force password rotations every ninety days, yet recent data shows this habit increases weak passwords and boosts phishing success rates. We look at how the NIST guidelines shifted from arbitrary time limits to risk-based authentication, and why companies like Microsoft and Google dropped mandatory resets. Lucas and Luna break down the psychology of 'password fatigue' and the specific metrics that prove allowing longer, memorable passphrases actually reduces breach frequency. If you are a CISO or IT manager in September 2026, your current policy might be doing…