Microsoft says regular password change is useless or a waste of time and money

According to a survey published by Microsoft recently, regular password change does not deny hackers, but is a waste of time and money.
Currently, many enterprise IT departments force employees to change their passwords on a regular basis as one of the security policies. This not only makes employees feel disgusted, but also makes network administrators feel headaches.

However, according to a survey recently published by Microsoft, this does not actually work. Microsoft pointed out that hackers will immediately launch an attack after obtaining the user's logon password, instead of waiting for a few weeks to allow the user to change the password before launching an attack. This is like waiting for the homeowner to change the lock head instead of opening the door immediately after a thief finds a key.

Microsoft said regular password change is a waste of time, that is, a waste of money. If the United States has 0.2 billion million-year Internet users, the salary is calculated twice the minimum wage, one minute a day, the total output value of a year is equivalent to 16 billion US dollars.