Since many companies must follow the rules set by one compliancy or another and these have demanded passwords to contain 3 of the 4 different groups of characte

Since many companies must follow the rules set by one compliancy or another and these have demanded passwords to contain 3 of the 4 different groups of characters AND require changing said passwords every 3 months, most employees have been trained to use a number scheme along the lines of: <word> <special char> <number> Whereby word & special character are set in stone (easy to remember) and the number just increments with every change. If only there was a way to allow more flexible demands on passwords within MS AD, things would improve so much. Password > 14 characters and NOT listed in Pwned Passwords == allow for passphrase to be used "forever" Password < 14 characters OR listed in Pwned Passwords == demand (regular|immediate) change. Very decent source for Pwned Passwords https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords