This is echoed by CESG (part of GCHQ) in their password guidance: https://www.cesg.gov.uk/guidance/password-guidance-simplifying-your-approach https://www.cesg.

This is echoed by CESG (part of GCHQ) in their password guidance: https://www.cesg.gov.uk/guidance/password-guidance-simplifying-your-approach https://www.cesg.gov.uk/guidance/password-guidance-simplifyi...