> If all you did was to change all your passwords to never expire, you'd be reducing security. Not necessarily. Except in cases of gross negligence, such as s

> If all you did was to change all your passwords to never expire, you'd be reducing security. Not necessarily. Except in cases of gross negligence, such as storing passwords in plain text, the human is always the weak point in a security system. If you make people less likely to leave their passwords on sticky notes, perhaps by removing password rotation, then you have improved the weakest link of the system, and improved the security of the system as a whole.