A method of providing variably expiring passwords can include determining a complexity level for a password. Based upon the determined complexity level, an expiration duration can be calculated for the password. The password can be deactivated at a time determined by the expiration duration.