“Passwords do not age. They do not sour, spoil, or go stale.”
T-Mobile told Fleishman his password was old and should be changed. Change a password when it leaks, when it is weak, or when someone stole it. Otherwise leave it alone. Microsoft still tells Windows 10 admins that 8 characters is enough and won’t let them require more than 14. The expiry nag is theater from companies that skipped the real fixes.