If you have strong hashing that makes it costly to brute force passwords, I think this should be enough for most users. Also, there is little evidence that ent

If you have strong hashing that makes it costly to brute force passwords, I think this should be enough for most users. Also, there is little evidence that entropy increases all that much when you force users to choose very long passwords.