NIST finalized new guidelines, substantially revising password security recommendations and upending many of the standards and best practices which security professionals use when forming policies for their companies. The National Institute of Standards and Technology (NIST) is a non-regulatory federal agency within the U.S. Department of Commerce. NIST develops Federal Information Processing Standards (FIPS) which the Secretary of Commerce approves. The new framework recommends, among other things:Remove periodic password change requirements. Require screening of new passwords against lists of commonly used or compromised passwords.”]
Source: https://www.inforisktoday.com/blogs/surprising-password-guidelines-from-nist-p-2764