No. You can use NIST guidance and are not required to change your password every 90 days