How do you put a password requirement on a web page?

Requiring a very strong password, and not requiring it be changed is often better. However it does have a major drawback: if someone acquires a password, if it's not changed, they may have long term access.