Which of the following controls would BEST decrease exposure if a password is compromised?

A. Passwords have format restrictions
B. Passwords are masked
C. Password changes are mandated
D. Passwords are encrypted