BruceVC
Magister
Most 2FA has an expiry period, they could set it for less but that would create more dramaTaluntain DarkUnderlord seriously guys, how does making us enter the authentication code every 30 days improve security?
If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.
But the reason its done is the same reason its implemented. Security reasons, its the same reason you should change your password regularly and not use a cached password but who ever does that ?