What password setting has the greatest impact when attempting to prevent brute-force password cracking?

Increasing password length makes it harder to crack. Decreasing the password length would make passwords easier to crack. History and expiration do not influence brute-force attacks unless the expiration happens to land during the time the password cracking was attempted.