Bill Burr who originally came up with password practices such as changing them every 90 days, using caps/special characters, recanted most of his advice in 2017.