Comment NCSC guideline: no password expiry (Score 1) 498
Contrary to many common password policies the UK National Cyber Security Centre (https://www.ncsc.gov.uk/articles/problems-forcing-regular-password-expiry) recommends passwords should never expire. Problem with password expiry is that it is not usable, since people having to make new passwords all the time choose weaker passwords.