Modern Password Guidelines

If i were to ask you what the best policy for passwords was, i imagine you would unanimously list the following: change every 90 days...