If you know what you’re doing, you shouldn’t put a maximum on the length or character set of passwords, and you should accept any password that has some reasona

If you know what you’re doing, you shouldn’t put a maximum on the length or character set of passwords, and you should accept any password that has some reasonable amount of entropy rather than putting in arbitrary restrictions like “must have 1 number and 1 symbol”. This is for the sake of users who want to supply their own passwords, but as a side effect, it means Safari’s default password generation algorithm should work fine. If you don’t know what you’re doing, you probably wouldn’t know how to put information in a manifest anyway…