> I also think there should be a similar file for the regular expression that expresses a site’s allowable passwords. I disagree. Password "complexity" require

> I also think there should be a similar file for the regular expression that expresses a site’s allowable passwords. I disagree. Password "complexity" requirements need to die and instead every site's password regex should be `.{12,64}` and then verify it's not in the dictionary or a list of leaked passwords.