IT Password Expiration Policies Don't Work Arbitrary time-based password expiration is not an industry best practice and has not been for years.
