Re: the real issue is GCHQ is too busy to keep guessing your new ones
I'm currently approaching 100 for some. I've just had the 90 expiry reminder at work. I have 12 systems to change, even the companies own products and internal systems have different logins and password rules, so the base word + increment is one way of staying sane and not getting locked out.
Yesterday I had to sign in to the ADATA website to get access to the cloning software for one of their SSD drives. They thoughtfully confirmed my account with an email containing the plain text password I had just created. There really is no point regularly changing the locks on the doors if there's a big window open right next them.