Yes, well, I'm being cynical ...

Yes, but are you being cynical enough? ----------

Is 14 months a excusable length of time for someone not to have changed their password after a break?

That cuts both ways. Who is changing the password, the good guys or the bad guys? -- These are my opinions. I hate spam.