IF you are rotating passwords...
You are already worried the users are loosing passwords! This is a good reason to change them. However, constantly changing a password is possibly the worse solution. If that kind of worry is there, then use 2 factor. It means the password alone is not enough, and while theft of the second factor is possible... It's physical access at that point, you know you've already lost if they can get that far with a user (getting both password and the generator).
Biting the hand that feeds IT
