The problems with forcing regular password expiry

https://www.ncsc.gov.uk/blog-post/problems-forcing-regular-password-expiry