A podcast I listen to, Darknet Diaries, had an episode on password policies. They said that forcing frequent changes often makes people use weak passwords or write them down. @jake_torres68 is right about sticky notes creating a physical risk. I remember a story where an office had a break-in because passwords were left on monitors. The episode suggested that companies should use password managers instead of monthly resets. It made me wonder if these old rules actually help security or just annoy everyone.