What is not a best practice for password policy ?

• A. Deciding maximum age of password
• B. Restriction on password reuse and history
• C. Password encryption
• D. Having change password every 2 years