Gotta do mine twice a year, always needs to be new, have a number, and a special character. It was annoying because I'm a pass phrase kind of person, but found it's not too hard to just add the year and exclamation marks for each password change into my passphrase.
Nope, has to be new and unique every time. Their system keeps every password I've ever had, which if you think of it, is a really bad liability if they're hacked.