Changes in Password Best Practices - Schneier on Security
www.schneier.com/blog/archives/2017/10/changes_in_pass.html
What Jamie wrote
Password expiration and special character requirements should go away in favor of long pass phrases. Any guess on how many years it will take security certification and audit functions to catch up to this wisdom? My guess is 5 years.