I think you underestimate people inventiveness when it comes to circumventing these types of systems. People will either keep trying new strategies to embed co

I think you underestimate people inventiveness when it comes to circumventing these types of systems. People will either keep trying new strategies to embed counters in their passwords (maybe increment a letter, or multiple a number by 10), or they’ll just write the password on a post-it they keep on their laptop. Either way you’ve now got a whole load of complicated code that makes it harder to people to create genuinely strong and memorable passwords, and no additional security.