1 min read
Time to rotate service account passwords
Service accounts with never-expiring passwords become permanent backdoors.
Document every service account, owner, and last rotation date.
Prefer
- Managed identities / gMSA where possible
- Vault-stored secrets with rotation
- Alerts on interactive logons for service accounts
Ask Qutzl for a service account inventory.