--- title: 'How Often Should You Change Your Password?' url: 'https://blog.datum-consulting.com/blog/how-often-should-you-change-your-password' markdown: 'https://blog.datum-consulting.com/blog/how-often-should-you-change-your-password.md' date: '2019-12-18' description: 'Password changes are often recommended to keep your account safe, with some companies enforcing them every 1 - 3 months. We’ll put this myth to rest and show you why changing your password often doesn’t make it more secure. Conventional wisdom states that you should change your passwords regularly …' taxonomy: category: - blog tag: - cybersecurity - 'data security' - passwords - 'password manager' - 'cyber attack' - malware - 'multi-factor authentication' - 'data breach' month: - December archives_month: - dec_2019 archives_year: - '2019' --- # How Often Should You Change Your Password? [ Home ](https://blog.datum-consulting.com/) How Often Should You Change Your Password? ## [How Often Should You Change Your Password?](https://blog.datum-consulting.com/blog/how-often-should-you-change-your-password) 18th Dec 2019 [cybersecurity](https://blog.datum-consulting.com/tag:cybersecurity#body-wrapper) [data security](https://blog.datum-consulting.com/tag:data%20security#body-wrapper) [passwords](https://blog.datum-consulting.com/tag:passwords#body-wrapper) [password manager](https://blog.datum-consulting.com/tag:password%20manager#body-wrapper) [cyber attack](https://blog.datum-consulting.com/tag:cyber%20attack#body-wrapper) [malware](https://blog.datum-consulting.com/tag:malware#body-wrapper) [multi-factor authentication](https://blog.datum-consulting.com/tag:multi-factor%20authentication#body-wrapper) [data breach](https://blog.datum-consulting.com/tag:data%20breach#body-wrapper) Password changes are often recommended to keep your account safe, with some companies enforcing them every 1 - 3 months. We’ll put this myth to rest and show you why changing your password often doesn’t make it more secure. Conventional wisdom states that you should change your passwords regularly to keep hackers off-kilter and continuously scrambling to access your data. These password changes are often advised as a way to keep your account safe and your information secure. Although it may sound reasonable, it’s not as accurate as people would like to believe. The truth is that changing your password regularly makes you more vulnerable to data breaches and hackers, than choosing a [strong password](what-makes-a-secure-password) in the beginning and leaving it alone. ##### Forced password changes Even though it’s your password, some companies have policies in place that require you to change it every 30, 60, or 90 days. They operate under the assumption that changing passwords frequently will keep their data secure. If your password is changed regularly, it ensures that anyone who has unauthorized access to your account can’t maintain it for very long. Unfortunately, enforcing frequent password changes for security reasons can backfire. These password changes can pop up at the worst possible moment: when you’re clocking in or out for the day, trying to access your weekly timecard, or just trying to get into your email. Pressed for time and facing an account lockout, people tend to fall into a predictable pattern for creating a new password. The passwords chosen are simplistic, incredibly easy to remember, and often go up in sequential order, because they only change the number or special character that’s tacked on the end. These simple and predictable password patterns are easy to hack, leaving your data far more vulnerable and insecure than it would be if you generated a strong password once and stored it securely in a [password manager](lock-down-your-passwords). ##### When you should change your password? Now, this doesn’t mean you can avoid changing passwords ever again. There are key times when you should change a password. They include: - After a service discloses a security incident. - There is evidence of unauthorized access to your account. - There is evidence of malware or other compromise of your device. - You shared access to an account with someone else and they no longer use the login. - You logged in to the account on a shared or public computer (such as at a library or hotel). - It’s been a year or more since you last changed the password, especially if you don’t have [multi-factor authentication](enabling-multi-factor-authentication) enabled. In all these cases, updating your password is a smart precautionary step. A new password ensures that someone can’t abuse your account even if they have the old password. ##### How you should approach password changes Use the above recommendations as a guideline for approaching password updates going forward. To save you time and help you be smart about making password changes, we also recommend the following: - **Put every password in a password manager.** It’s much harder to know when it’s time to update a password when you have no idea how many accounts you have. You should collect all of your accounts in one safe place. A [password manager](lock-down-your-passwords) stores all your passwords in a vault, where they’re organized and encrypted for safekeeping. - **Audit your passwords.** Let’s say you do have all your passwords collected in a vault. Great! But view just how many logins you have stored and find out which ones need a new password. - **First change weak, reused, and compromised passwords.** Prioritize updating weak, reused, and compromised passwords. - **Prioritize sensitive accounts next.** Once you’ve eliminated all weak and duplicated passwords, be sure to update your most important passwords, too. Those may be passwords for banking, investments, email, social media, medical records, and taxes. Credentials for Amazon, Netflix, Hulu, and similar streaming and shopping services are also hot commodities on the dark web, so be sure those are strong, too. - **Turn on multi-factor authentication where you can.** We’ve said it before, and we’ll say it again. [Multi-factor authentication](enabling-multi-factor-authentication) is one of the best ways to slow down or prevent an attack, even when someone steals your password. Be sure to turn it on everywhere you can. - **Set aside time every year to update old passwords.** Once you’ve completed the above, don’t go overboard updating your passwords frequently. Unless you know yourself to be a target, the above steps should be enough to protect your accounts. Just set a note in your calendar to audit your password manager vault at least once a year. Block time to update the passwords. At the end of the day, our advice is to set up a good password system, aided by a password manager. Once you are organized and have done the initial work to clean up your password security, it’s much easier to maintain that strong security going forward. [ Previous Post](https://blog.datum-consulting.com/blog/4-tips-before-upgrading-your-phone) [Next Post ](https://blog.datum-consulting.com/blog/2019-most-popular-passwords) #### Related Posts - 100 [The Most Hacked Passwords Around the World](https://blog.datum-consulting.com/blog/most-hacked-passwords "The Most Hacked Passwords Around the World") - 100 [Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins](https://blog.datum-consulting.com/blog/passwordless-sign-ins "Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins") - 100 [How Hackers Get Your Passwords and How To Defend Yourself](https://blog.datum-consulting.com/blog/hackers-get-passwords "How Hackers Get Your Passwords and How To Defend Yourself") - 100 [How to Keep Your Company Safe from Russian Hacks](https://blog.datum-consulting.com/blog/russian-hacks-safety "How to Keep Your Company Safe from Russian Hacks") - 100 [Data Privacy Week: 6 Best Practices for Your End Users](https://blog.datum-consulting.com/blog/data-privacy-week "Data Privacy Week: 6 Best Practices for Your End Users") [JOIN OUR NEWSLETTER](https://zc.vg/sf/bawK1) [PAY INVOICE ONLINE](https://datum.connectboosterportal.com/authentication/login) [![](https://blog.datum-consulting.com/modules/sidebar/Yubico.png)](https://www.pntra.com/t/SkNJTk5MT09DSEZMTExNQ0dPR0tNSw) #### Follow Us [](https://twitter.com/datumconsulting "Twitter")[](https://www.linkedin.com/company/datum-consulting/ "LinkedIn") "); #### Popular Tags #### Archives - [ 3 May 2022 ](https://blog.datum-consulting.com/archives_month:may_2022) - [ 3 March 2022 ](https://blog.datum-consulting.com/archives_month:mar_2022) - [ 3 February 2022 ](https://blog.datum-consulting.com/archives_month:feb_2022) - [ 2 January 2022 ](https://blog.datum-consulting.com/archives_month:jan_2022) - [ 1 December 2021 ](https://blog.datum-consulting.com/archives_month:dec_2021) - [ 2 November 2021 ](https://blog.datum-consulting.com/archives_month:nov_2021) - [ 2 October 2021 ](https://blog.datum-consulting.com/archives_month:oct_2021) - [ 1 September 2021 ](https://blog.datum-consulting.com/archives_month:sep_2021) - [ 3 August 2021 ](https://blog.datum-consulting.com/archives_month:aug_2021) - [ 2 July 2021 ](https://blog.datum-consulting.com/archives_month:jul_2021) - [ 4 June 2021 ](https://blog.datum-consulting.com/archives_month:jun_2021) - [ 2 May 2021 ](https://blog.datum-consulting.com/archives_month:may_2021) --- ## Navigation - Parent: [Home](https://blog.datum-consulting.com/index.md) - Previous: [The Most Popular Passwords of 2019](https://blog.datum-consulting.com/blog/2019-most-popular-passwords.md) - Next: [4 Things to Do Before Upgrading Your Phone](https://blog.datum-consulting.com/blog/4-tips-before-upgrading-your-phone.md)