Before we can pick a path to follow into the future of authentication, we must first overcome some myths and misconceptions around passwords that are still widely held, even by security professionals.
Source: It’s Time to Dispel These 6 Dangerous Password Myths
I would add one more, forcing password resets on a regular basis does not offer any more security.
