How often do you change important passwords?

[progress]

How often do you change important passwords? Important can be defined any way you like :)

[GrailVanGogh]

Three to 6 months except for banking which I change out 1x per month.

[demonon]

I have so many passwords that I just create strong ones.
I don't bother with changing them.

[twl845]

I create 10 character passwords of letters upper and lower case with a few numbers. How can you decide when its time to change a password. If someone starts trying to crack your password 5 minutes after you create it, then you should have changed it already. But if no one tries to crack it for 5 years, should you change it? :doubt:

[icr]

Never
my passwords consist of both cases alphabets,symbols,numbers
which requires years to crack

[InfinityAz]

Same as others have said, I create strong passwords (20 characters, upper & lower alpha and numbers), unique for each site, and don't need to change them.

[tipstir]

Clients Network Security changes them every 3 months. I am not going to do that here. Strong password is good enough. If you think someone drop in on to one of your boxes you can always unplug the network cable.

[JRViejo]

Never.

FYI: Password Recovery Speeds (http://www.lockdown.co.uk/?pg=combi&s=articles) - How long will your password stand up.

[ronjor]

Some financial institutions require you change you password every ninety days. Not a bad idea. :)

[himynamaborat]

I differentiate between passwords for encrypted data that requires physical access (e.g. TrueCrypt) and online passwords.

The odds that someone could steal my TrueCrypt password AND gain physical access to be able to use them are somewhere between slim and zero (closer to zero). Even if my passwords to my on-site data were stolen (e.g. keylogger), that stolen information would likely be lost with the passage of time before it ever becomes a risk. People who steal data with keyloggers want an instant and easy payoff (e.g. online banking, credit cards, etc.).

As far as online passwords, I'm less inclined to care about that than my local computer passwords. In all cases I use strong passwords that can't be guessed. So, the only way to get them is to steal them. If someone steals my bank account passwords, paypal password, etc., I'm likely to just shrug, call my bank to dispute the charges, and move on. The fact is, you would have to change your password between the time it's stolen and someone decides to use it. My guess is that would be a narrow window.

So, the answer is never for both cases.

[chrisretusn]

In most cases I do not change my passwords. For important sites I use the max length allowed up to 20 characters. Less important sites normally 8 character passwords. For some sights I've used the same password for over 9 years.

If there was an option for as required, I would have picked that. Several services I use require frequent password changes.

[suliman]

I use Lastpass and generate 20 character long passwords with random characters so I dont have to remember them :) once a year maybe, if I feel for it for some sites, I change them. Maybe I should do it more often since it is so easy when I dont have to remember them.

[boonie]

As Ronjor said, a few of mine require a 90 day change.
So I just change them all every 90 days.
Strong passwords with mixed case, numbers, and special characters (when allowed by site).

[progress]

-{ Quote: "Some financial institutions require you change you password every ninety days. Not a bad idea. :)" }-

Do you change your password every ninety days as well? :)

[c2d]

I create 15 character long passwords and change them every 2 months.

[Get]

Only when I forget them ??? .

[Fajo]

I only change passwords when needed. One of my current password is 36 Letters, Numbers, Special char's, tho Not many programs or sites allow them to be this long. I have passwords for things that mean nothing and 3 different passwords for things that do. The strength of the password depends on what its being used for.

[wat0114]

Only @ work every three months because we're forced to, otherwise never. Mine are typically 8-10 characters, mixture of lower & upper case, at least one number, no words found in the dictionary. Good enough for me, as I'm not the government or CIS.

[Noob]

Like once a year, anyways i only have like 2 important passwords so it's easy :D

[Dogbiscuit]

There is something ironic in individuals telling the entire world how often they change their important passwords, on a site dedicated to computer security.

[I no more]

-{ Quote: "There is something ironic in individuals telling the entire world how often they change their important passwords, on a site dedicated to computer security." }-

You think that's strange. Here's the password I use for all my financial institutions:

89eJ8RQI00a8sjrhue

Now, the reason I feel this is safe, even though I never change my passwords, is because you people don't know who I am. And you don't know which financial institutions I use. Good luck using it.

[SirPeterPan]

I only use very secure passwords and I change all of them once a month.

[progress]

One person voted daily :o I would go nuts ... ;D

[Page42]

I voted once every six months but it's more like once a year, because I think they are pretty secure. :)

[manOFpeace]

Never for me. With the exception of a few but only for other causes other than security reasons. :isay:

[xandros]

maybe every one time a year , but i always change the password of the wireless router

[Tarnak]

Only if I have forgotten.

[AvinashR]

I keep changing my password every year .. But this time i haven't changed it yet :)

[microbial]

Definitely should change mine more than I currently do which is never!

I've lost count of the number of times I've had to hit the forgotten pw button on various websites...

[Woodgiant]

I have two master passwords that I should change more often, actually I have not changed them since they were made,and that is for a year now.
One of the two passwords is for Roboform where I use virtual keyboard. The other is my Windows Password there I use CTRL+ALT+DELETE before logging on to Windows 7 right before the log on screen, When secure logon is enabled, no other program (such as a virus or spyware) can intercept your user name and password as you enter it. That IS what they say ;)

Best Regards

[mrgigabyte]

have lastpass dont have to worry about that just generate a password when i join something

[acuariano]

me,like once a year..btw would you guys use password generated by a intewrnet site like http://strongpasswordgenerator.com/

[acr1965]

I just changed my yahoo email password, first change since I had the email from 7+ years ago.