Yes, NIST now recommends against requiring periodic password changes in their official guidance document.

that would instantly make me very dumb and require a lot of explaining on the phone. like "when I say hello mister Thompson and press down on your foot then you smile and nod, do you understand?" levels of dumb.

"I've used up all the vowels! there are only 5! this means the only password left is rhythm"

"no you can use the same vowels just they can't be in the same place"

"like I have to do it in my kitchen?"

"no the same place in the word"

"so it has to be the same word with different letters?"

"no, it has to be a different word with different letters"

"well like I said I already used all the vowels"

When it expires, bump every character up by one - A/a becomes B/b, 1 becomes 2, for symbols use the next one on the row.

That also means they are saving that information. I doubt a single character can be usefully hashed. Seems like a security nightmare.

It's an easy attack vector, hackers love it.

Venn diagram is a circle.

Lousy Smarch weather

Lunar calendar