I've been advocating against frequent password updates for decades for the very reasons stated in this article, but I'm always shouted down. I'm not a security professional, so WTF do I know, right?

NIST proposes barring some of the most nonsensical password rules

Proposed guidelines aim to inject badly needed common sense into password hygiene.