I figure most people might think if changing the password is optional, why bother? That line provides timely motivation to do so immediately. On further thoug

I figure most people might think if changing the password is optional, why bother? That line provides timely motivation to do so immediately. On further thought, I'd also remove the part which mentions supplying the current password and just focus on the new password requirements. The form on the site would naturally ask for their current password.