I suspect that the requirement of (1) changing the password every n days, (2) new password cannot be the same as previous m passwords (usually, m=10) leads to i

I suspect that the requirement of (1) changing the password every n days, (2) new password cannot be the same as previous m passwords (usually, m=10) leads to insecure passwords for most. I've seen people handle such requirements by creating an initial password, say p@$$w0rd and then appending a digit to it. On any subsequent mandatory password change event, they increment the new password from p@$$w0rd0 to p@$$w0rd1. Not sure if it leads to anything more secure. Wish more people started to use GPG based password store such as pass [0]. [0] https://www.passwordstore.org/ https://www.passwordstore.org/