Password life expectancy down to seconds

Not good. People also need to watch links they receive in their emails especailly their spam box. I remember that once I got a suspicious link that led to genuine looking site (ebay?); I believe that the email had said that they needed my credit card for something. Anyway the specifics allude me but I do remember entering in a fake password which took me past the "log on" screen and then I knew the site to be fake. If it was my credit card they wanted not only could they have gotten the card but also my password. If in doubt of an email go directly to the site instead of clicking on the link and log on that way even if the link does look legit. If there is something legit that requires your action it should show up in your account.