4 ms·I'd add 'not in the 10,000 most common passwords' to that requirement.by proaralyst 9y agoI'd add 'not in the 10,000 most common passwords' to that requirement.