Which three suggestions are good security password policies that a company or individual should follow?

Passwords should have an expiration period.

Password lockout should be enabled.

A mix of letters, numbers, and other characters should be used.