On: Password Requirements: Myths and Madness

[eastbound]

My former company required not to use one of the last 10 passwords. So every 3 months, employees did the 11-password dance, setting the password back to the original one.

[midasuni → eastbound]

My company (5b a year annual revenue so not small) stops you from changing your password within 2 days of changing it previously to stop that.

Even the head of information security tried changing this and failed to get the change through.

[hyperman1 → midasuni]

That's the point where people simply append the month number.