https://chrisworth.dev/skill-tag/enterprise-security/Recent content in Enterprise Security on Chris WorthHugoen-usTue, 11 Mar 2025 09:00:00 -0600https://chrisworth.dev/posts/enterprise-password-security-best-practices/Tue, 11 Mar 2025 09:00:00 -0600https://chrisworth.dev/posts/enterprise-password-security-best-practices/<p>I spent years following password rules that made security worse. Change passwords every 90 days, use uppercase, lowercase, numbers, and symbols, never reuse passwords. Under those rules, &ldquo;Spring2025!&rdquo; rotating to &ldquo;Summer2025!&rdquo; rotating to &ldquo;Fall2025!&rdquo; is fully compliant, and that&rsquo;s exactly the problem: the rules select for compliance, not for unpredictability.</p> <p>I checked passwords built that way against breach databases anyway, out of habit more than doubt. Every single one appeared in credential dumps available to anyone willing to look. The rules designed to protect me were training me to be predictable.</p>