Best Practice for passwords

We have an discussions going on and i'm interested in the response from the community

The discussion is on forcing password changes with 2fa

​

one side is as long as you have 2fa you don't need to force a reset password, this is outdated procedure and makes it less secure causing password changes and its better to just have one long passphrase and never change it.

​

the other side is but 2fa is the backup, if you dont …

2fa best practice community cybersecurity discussions don password passwords practice procedure reset response