I wish to stir up the password policy debate. I have looked around for best practices for password policies. I see more and more articles saying that you should increase the complexity of the passwords and make it so that users don’t change their passwords…