Work out password ageing policy instantly with clear inputs, formula shown and shareable results.
chage controls minimum and maximum password age plus a warning period. Modern guidance has reversed on rotation: NIST SP 800-63B advises against arbitrary periodic expiry because it drives predictable increment patterns and weaker passwords, recommending instead long passphrases, breach-list screening and forced change only on evidence of compromise.
Rotation load
changes per user per year = 365.25 / PASS_MAX_DAYS; fleet changes = users x that; tickets ~ 6 percent of changes
Because users respond with predictable transformations such as appending an incrementing digit, which weakens rather than strengthens the credential while adding support cost.
It stops a user cycling through several changes immediately to return to their old password. It only matters when a password history is enforced.