Why is it recommended that you not use the same password for everything?
Using the same password for more than one account is like having one key to unlock every door you use. If a bad guy steals or copies the key, every door is vulnerable. Don’t make it easy to get to your information should one of your accounts becomes compromised. Store account information in your browser.
Is it safe to reuse the same password on multiple accounts?
Password reuse is an important concern in any organization. Many users want to reuse the same password for their account over a long period of time. The longer the same password is used for a particular account, the greater the chance that an attacker will be able to determine the password through brute force attacks.
When to force expiration of first time password?
Force expiration of initial or “first-time” passwords In certain situations, a user may be issued a new account and not access that account for a period of time. As mentioned previously, initial passwords have a higher risk of being guessed or intercepted depending on what process is being used to create and distribute passwords.
When do you need to share passwords with another user?
In situations where someone requires access to another individual’s protected resources, delegation of permission options should be explored. For example, Microsoft Exchange calendar will allow a user to delegate control of his or her calendar to another user without sharing any passwords. This type of solution is encouraged.
Do you have to write down your password every time you change it?
If you set Enforce password history to a number greater than zero, users must come up with a new password every time they are required to change their old one. This improves security, but it can increase the risk that users will write down their passwords so they do not forget them.