Passwords for the developer portal will expire 90 days after creation, or last change.  As your Developer Portal password is the same as the Sandbox password, the same applies to passwords used by API Apps.