Does a company forcing you to change your password every 6 months (for example) actually increase security? As far as I'm concerned it just causes me to forget my password.

Studies have shown that mandatory password changes actually reduce security because people tend to either use simpler passwords that are easier to remember, or they just write them down in easy to find places.

In a cyber security class lab where we have to hack a computer, the password is on a post-it note under the keyboard. That also shows up as a multiple choice question on finals in other classes where I was the TA.

If its not there, use the picture, the coffee mug. But any place witha 6 month policy also has the majority of passwords on post its under the keyboard.