Asking users to change passwords all the time isn't good for security

It might sound counter-intuitive, but asking for frequent password changes actually decreases security.