Does your company network or a frequently visited website force you to come up with a new password because it has declared your old one is past its expiration date?
If you find that annoying, you’re not alone. What’s worse: It’s actually bad for cybersecurity, say researchers.