Annoying password rules like frequent mandatory changes actually make us less secure, and should be abolished

“The sched­uled-re­place­ment pol­icy is one of a num­ber of poor or in­ef­fec­tive pass­word prac­tices that make log­ging into sites, apps and ser­vices more com­pli­cated and an­noy­ing than ever.”  

[Link]