|
I always considered the whole 'change passwords' mandated policy actually reduced security due to a lot more people forgetting their passwords, calling up for them to be reset etc etc, which leaves open a few more opportunities to catch the new password via phone sniffing, email sniffing etc.
Personally I tend to use good strength passwords, unique for each site and hope they don't need changing in a looooong time. Remember too that most sites will be storing your passwords in a clear-text form in their DBs, more reason to use unique passwords.
I do still keep my passwords on paper locked in a safe, for the sake of my family if something happens to me.
Paul
|