This is the only rule on this site that can end a trip before it starts — and the check that catches people is not the one at the Italian border.
To enter the Schengen area on a non-EU passport, the document must satisfy both of these at once. The Schengen Borders Code puts it plainly: its validity shall extend at least three months after the intended date of departure from the territory of the Member States, and it shall have been issued within the previous 10 years.
Source: Regulation (EU) 2016/399 (Schengen Borders Code), article 6(1)(a).
Airlines carry the cost of flying back anyone who is refused entry, so they check documents themselves at departure — and they apply their own rules, which are frequently stricter than the law.
The widely repeated "six month rule" is airline and industry practice, not Schengen law. But practice is what is applied at the desk, and an argument about the correct legal interpretation is not one you can win before the flight closes.
If your passport expires within a year of your return date, renew it before you book anything expensive. It costs a fraction of what a missed departure costs, and it removes the entire question.
The European Union has introduced an Entry/Exit System that digitally records non-EU travellers crossing the external Schengen border, replacing passport stamping. At the first crossing it captures fingerprints and a facial image.
For travellers, the important points are short:
ETIAS is a separate, chargeable travel authorisation that has not yet started. Any website selling you an ETIAS today is a scam. When it does start, apply only through the official EU channel.
Sources: European Commission and IATA guidance on the new EU entry requirements; the US State Department publishes the same guidance for American travellers at travel.state.gov.