I mean do not require passwords to be reset every 30,60,90 days etc. Ideally you would only force a password reset if they fell for a phishing attack or there w

I mean do not require passwords to be reset every 30,60,90 days etc. Ideally you would only force a password reset if they fell for a phishing attack or there was a breach of the hashed password database/auth system.