Cybersecurity researchers say systems that force users to change their passwords often actually could be creating security risks. But lots of companies and even government websites require this and other not-so-secure policies. WSJ tech columnist Christopher Mims joins host Zoe Thomas to discuss why security experts are concerned and the login strategies they suggest companies adopt.

Learn more about your ad choices. Visit megaphone.fm/adchoices