Forced password changes are making me look for a new provider. Although THEY may consider it best practice, I really don't think it's for Nord to unilaterally dictate when I am required to change my password. IMO it actually makes your account less secure because you inevitably end up choosing short memorable passwords because they need to changed so often. Honestly, I'd rather just pay more to use another provider - it really is that irritating.