CESG (UK cyber-security agency) advise against forcing regular password expirycesg.gov.uk7 pointsSignez10 years ago