It's a trade-off of convenience vs security. If you're worried a password will leak, how frequently should you rotate it to maintain security? e.g. Even rotati

It's a trade-off of convenience vs security. If you're worried a password will leak, how frequently should you rotate it to maintain security? e.g. Even rotating yearly still seems a chore if you do it for websites you don't frequently visit (such as sites you made 1 order from). The "add YYMMDD" or whatever is a way of working around a policy which automatically enforces a more frequent rotation than you want.