I figured that might be the case. Would it help to have password reset policies in the time frames of years, I wonder? A stolen password might be used inconsp

I figured that might be the case. Would it help to have password reset policies in the time frames of years, I wonder? A stolen password might be used inconspicuously for some time. I'd prefer two-factor became more ubiquitous.