2 ms·

Possibly even testing them, because I've used sites that rejected passwords that met all the requirements.