Forcing users to periodically change their passwords should go the way of the dodo according to the US government

Passwords are a pain. Just when you've got one fully committed to memory, chances are your workplace will force you to throw it away and make a new one, in the name of cybersecurity—and if you're anything like me, you'll spend the next few weeks typing in the old one out of habit. Of course, you should be using a good password manager to keep track, but even then it's an irritant.

The National Institute of Standards and Technology (NIST) has released the latest version of its Digital Identity Guidelines...