Yes, NIST now recommends against requiring periodic password changes in their official guidance document.
Yes, NIST now recommends against requiring periodic password changes in their official guidance document.