How to Run a Password Update Campaign Efficiently and With Minimal IT Costs
Email notifications to update passwords potentially yielded diminishing returns after three messages. They also found that a prompt to update passwords while users were trying to log in was effective for those who had ignored email reminders.