It's not just for compromised passwords. Some systems require regular password changes.