Password expiration notifications are typically met with groans from users. No one wants to trade a familiar password that they can input from muscle memory for one that they have to think up and memorize. But the good news is, many companies are doing away with mandatory password expiration policies, as these policies are no longer necessary or even recommended under today’s cybersecurity best practices.