The irony here is this thread started in 2018 and in that time NIST has changed its recommendations on passwords removing the "Change every x number of day" guideline.  Why?  BECAUSE PEOPLE WERE WRITING PASSWORDS DOWN ON PAPER!!!  NIST decided that was more vulnerable than just making it easy for users to remember their own passwords.   Duh