What in the world makes Quickbooks think that they know more about users security requirements than the professional users do?
Even the US Government has finally admitted that forcing people to change passwords do NOT improve security.
Let users decide if they want a password and if/when they want to change it.
