The National Cyber Security Centre (part of GCHQ) doesn't think that forcing regular password expiry is a good thing.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?