On April 28, 2020 8:40:59 AM PDT, Scott Peters <peterssco...@gmail.com> wrote: >Linked to Microsoft Outlook email. Required to change passwords every >30 >days on our server. Just changed mine for the first time since using >K-9 >and now keep getting failure to authenticate messages. How do I change >the >setting to recognize the account with the new password?
Account settings -> Fetching mail -> Incoming server Account settings -> Sending mail -> Outgoing server And wow, forced password rotation every 30 days? That's crazy, and probably counterproductive. Current best-practice guidelines suggest only rotating passwords when there is an actual account compromise. If you can, point your IT people to the NIST guidelines, section 5.1.1.2: https://pages.nist.gov/800-63-3/sp800-63b.html The important quote: > Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily > (e.g., periodically). However, verifiers SHALL force a change if there is > evidence of compromise of the authenticator. --Sean -- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to k-9-mail+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/k-9-mail/C9C25D4A-548A-4504-94F8-459EAA352C98%40seangreenslade.com.
