The Mezzanine

I've read articles pointing out that forcing people to change their password cannot possibly have any positive effect on security. (It'd only be useful if the period between changing it was shorter than the period it'd take a computer to mechanically hack it, and these days that'd be like three minutes or something.)

More characters don't even help much; what really helps is length. Personally I like more characters *and* length.

Guess what my workplace and bank won't allow me to do?