> I think forcing users to create a new password every 6 months might be a really powerful protection for consumers I _almost_ (not quite, but almost) would r

> I think forcing users to create a new password every 6 months might be a really powerful protection for consumers I _almost_ (not quite, but almost) would rather get my investment/bank accounts hacked than this. I use a password manager, and just counting the ones I used in the last couple of months add up to like 150+ passwords. Total, I have hundreds for my active accounts across various sites, services, devices, etc. If I had to change them every 6 months, I'd be doing almost nothing else. Could be mitigated with some API integrations where every 6 months my password manager could just update the password on its own, but that will never be standard across everything.