It took over a year of mandatory 2fa w/ phone app before they stopped making us change our password every month.

At least my password isn't changing anymore but I never understood that policy if you made a strong password. It was overkill.

Some websites still require it though, and that's nonsensical and annoying. Just randomly generate one and keep it in a password manager.