For years, IT departments have drilled the 90-day password change rule into our heads, and most of us never questioned it. The logic seemed sound when computing power was more limited and cracking a ...