I once had to implement ridiculous password rules for the Intuit api. Rules that Intuit themselves didn't use. My favorite was "Verify password is not containe

I once had to implement ridiculous password rules for the Intuit api. Rules that Intuit themselves didn't use. My favorite was "Verify password is not contained in standard dictionaries (including foreign, non-English dictionaries)." So I have to search every word that humanity has ever used?? --- Letters [required 1]:a, b, c, d, e, f, g, … x, y, z, A, B, C, D, E, F, G, … X, Y, Z – AND Numbers [optional 1]: 0, 1, 2, 3, 4, 5, 6, 7, 8, and 9 – OR Symbols [optional 1]:~, !, @, #, $, %, ^, &, *, (, ), -, _, =, +, [, {, ], }, \, |. ;, :, ‘, “, ,, ., <, >, /, ? Verify password is not contained in standard dictionaries (including foreign, non-English dictionaries). Verify password is not the same as, or a trivial variation of the username. If Account ID is ‘fred’, then password cannot be ‘fred’ ‘fred1’ 1fred’, ‘fr3d’, etc. Password check should look for Account ID string in the password Password system must support mixed case passwords (Password1 should yield a different result than password1) Passwords will expire no later than one hundred twenty (120) consecutive days after issuance. Products must accommodate Account ID lockout after 10 consecutive failed password login attempts. The failed count (if currently under 10) should reset after a successful login If the 10th consecutive failed attempt is reached, the Account must be locked out for a minimum of 24 hours After a password expires, the user must select a new password The password system must remember the previous 5 passwords for each user The user may not select a new password that was one of the previous 5 passwords for that user The user may not change their password more than 1 time per hour --- https://developer.intuit.com/app/developer/qbo/docs/legal-agreements/password-policy-for-intuit-developer-services https://developer.intuit.com/app/developer/qbo/docs/legal-ag...