Cybersecurity
Practical, defensive answers to specific cybersecurity questions — authentication, credential hygiene, and everyday security decisions.
3 questions
What Makes a Passphrase Stronger Than a Complex Password?
Length matters more than character-type complexity for resisting brute-force attacks, and passphrases (several random words strung together) are typically much longer than complex passwords while staying easier to remember and type — which means people are less likely to write them down or reuse them.
Is a Password Manager Safer Than Reusing Strong Passwords?
Yes, decisively. Even a genuinely strong, complex password becomes a single point of failure once it's reused: one breached site exposes every account using that password. A password manager lets you use a unique strong password everywhere without having to memorize them, which eliminates that risk category entirely.
How Often Should You Actually Rotate Your Passwords?
For most accounts, current guidance from NIST and major security agencies is: don't rotate passwords on a fixed schedule if the password is strong and unique — only change it when there's evidence of compromise. Mandatory 90-day rotation, once standard advice, is now considered counterproductive because it pushes people toward weaker, more predictable passwords.