You've probably been told to change your passwords regularly, but should you really do it? There's a clear answer to that ...