Forcing people to change their passwords is officially a bad idea
A US standards agency has issued new guidance saying organisations shouldn’t require users to change their passwords periodically – advice that is backed up by decades of research
https://www.newscientist.com/a....rticle/2449454-forci
Discover the world at Altruu, The Discovery Engine