Notify the user in intervals to change the password
According to the Bundesamt für Sicherheit in der Informationstechnik (BSI) you should change your password in regular intervals:
"Das Passwort muss regelmäßig gewechselt werden, z. B. alle 90 Tage."
_(see: https://www.bsi.bund.de/DE/Themen/ITGrundschutz/ITGrundschutzKataloge/Inhalt/content/m/m02/m02011.html)
It would be nice to (optionally) enable a feature (for each password) that notifies the owner of the password (after an defined amount of time) to change the password