When a site constantly asks me to change my password doesn't that make me *less* secure, since it almost guarantees I have to write it down? - Erik Hanberg

When a site constantly asks me to change my password doesn’t that make me *less* secure, since it almost guarantees I have to write it down?

Update on this from my brother-in-law, a security expert.

No, because Russian hackers do not have access to your post-it notes, and they are the most likely potential thieves. However, changing your password regularly does nothing, because they are harvesting them via keyloggers. The most important thing you can do is run Firefox with the No-Script plugin, to prevent the keyloggers from being installed in the first place.



^