How often do credentials within a connection need to be updated?

How often do credentials within a connection need to be updated?

• A. Never
• B. Whenever they change at the institution
• C. Every 6 months
• D. Annually

Answer: (B)

Credentials tied to a connection should be updated whenever the issuing institution changes them. When a bank or service rotates a password, security token, or API key, continuing to use the old credential will usually cause authentication to fail and can disrupt access. Updating in response to the institution’s changes keeps the connection valid and secure, avoiding unnecessary updates on a fixed schedule. Fixed intervals like every six months or annually don’t align with when changes actually occur, and never updating ignores the possibility that credentials are changed for security reasons.

Credentials tied to a connection should be updated whenever the issuing institution changes them. When a bank or service rotates a password, security token, or API key, continuing to use the old credential will usually cause authentication to fail and can disrupt access. Updating in response to the institution’s changes keeps the connection valid and secure, avoiding unnecessary updates on a fixed schedule. Fixed intervals like every six months or annually don’t align with when changes actually occur, and never updating ignores the possibility that credentials are changed for security reasons.