The better the PW, the less you have to change it (wsj.com)

Until it’s exposed in a breach, at which point you have to change it regardless.

Your password is only as secure as the system(s) that store it.