in a nut shell:
Managed Service Accounts. MSA’s allow you to create an account in
Active Directory that is tied to a specific computer. That account has
its own complex password and is maintained automatically. This means
that an MSA can run services on a computer in a secure and easy to
maintain manner, while maintaining the capability to connect to
network resources as a specific user
more info here:
http://blogs.technet.com/b/askds/archive/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting.aspx
the account is used for extra security running services or apps and is handled by the os or by sharepoint!
EDIT
an example of a managed account would be when you install ssrs to sharepoint(intergrated mode) you need a managed account for that application running within sharepoint central admin... when you add ssrs you need a managed account that is part of the domain within central admin and the password change is either never expiers or handled by active directory:
As a best practice Reporting Services 2012 should run under its own
domain identity. To configure the Reporting Services 2012 Service
Application, an Active Directory account must be created and
registered as a managed account in SharePoint Server 2010 or in
SharePoint Server 2013
http://support.microsoft.com/kb/2723587
managed accounts are used for less maintanace and ease of use, like creating a new web application... you could create a list of managed accounts and when you create the web application you could easily select from the list rather than typing account name and password! other managed accounts like the example above are specific accounts that are needed for application services to run under sharepoint list of accounts here:
https://social.technet.microsoft.com/wiki/contents/articles/14500.sharepoint-2013-service-accounts.aspx