Password Safety & Security Best Practices: Passwords vs Passphrases

NIST and the UK's NCSC currently recommend not enforcing frequent password changes, and instead to use longer passphrases over shorter passwords. We take a look at the math to see what really makes sense, and arrive at some straightforward suggestions.

best practices passphrases password passwords password safety practices safety safety & security security