True or False: A strong password that must be frequently changed is always more secure.

• A. True
• B. Depends on the system
• C. Only for enterprise environments
• D. False

Answer: (D)

For password security, longer, unique passphrases combined with multi-factor authentication provide stronger protection than simply forcing frequent changes. A strong password that's changed often can backfire: users may struggle to remember it, reuse it across sites, or adopt predictable incremental changes, which can weaken security instead of strengthening it. Rotation also doesn’t help much against threats like phishing or malware that capture credentials, and it adds friction that can lead to poor security behavior. Modern practice prioritizes long, unique passwords and MFA, with rotation reserved for when a breach is suspected or mandated by policy. Hence, changing a strong password frequently does not guarantee more security.