I agree enforce two factors not more frequent password changes.