At my previous station in the 2000s and 2010s, one of the news reporters had printed and posted, in the newsroom, this humorous line that's made the rounds online for several years:

"Sorry, but your password must contain an uppercase letter, a number, a haiku, a gang sign, a hieroglyph, and the blood of a virgin."

When the company rolled out Microsoft 365, the system required everyone to change their password every three months, and in the beginning, there were pretty stringent password complexity requirements, as well as not allowing the re-use of any previous password by any user in the organization. Putting in a new password that the system would accept was sometimes a challenge, and if I remember correctly, IT later backed off on the strict requirements, especially the need for quarterly password changes.

My wife is an elementary schoolteacher, and the public school board around here no longer requires users to change their password at regular intervals. Staff can have the same password indefinitely for most online services that the school board manages, but there is mandatory two-factor authentication via Microsoft Authenticator, so every time my wife logs into her computer or any of the board's online services/portals/etc., she has to key in, on her phone, a two-digit number that appears in an Authenticator pop-up on her computer screen.

Password manager... then you can change all your passwords or have ones which aren't guessable...