@Jeffro - a LOT of people don´t change their password every 30 days, and that is why I get 2-3 ¨hacked blog¨ clients each week. I get malware clients, people hacked through WP plugins, people hacked through db sql injection, people hacked through themes or image uploads, people hacked through outdated software installed in the same domain, and more - ALL the time!

I can´t tell you how many people keep their web control panel login passwords the same for YEARS, and they wonder why all their sites get hacked. What happens if somebody is deliberately sniffing your host for passwords for months - and then they sell the logins to hackers?

Even online banking forces password resets, but most web control panels don´t - unless the company has had a security problem or breach (and by then it´s too late).

Your web site is your work - protect it. I have told clients HUNDREDS of times - you have a deadbolt on the front door of your house you lock each night, and keyless entry to all your cars, why are you leaving all the doors and windows wide open 24/7 on your web site home?