About password expiration and change policies...

[Gene Spafford <spaf () CERIAS PURDUE EDU>]

Here's something I wrote almost exactly 8 years ago about password expiration policies.  A few of you may remember it.  
I used to include this in my lectures at CSI and SANS courses in the 90s.

https://www.cerias.purdue.edu/site/blog/post/password-change-myths/