Cormac Herley, a principal researcher for Microsoft Research, has concluded that mandatory periodic password changes, required by some organizations and websites, are not worth the time it takes to make the changes and remember the new passcodes. To read more about his conclusions, read “Please Do Not Change Your Password” from the Boston Globe. “It’s not that Herley believes we should give up on protecting our computers from being hijacked or corrupted simply because safety measures consume time. The problem, he said, is that users are being asked to take too many steps, and more are constantly being added as new threats emerge or evolve.”