Note that current best practice is simple password rules, with password expiry only when there is reason to do so. Generally the suggested rules are: be at lea

Note that current best practice is simple password rules, with password expiry only when there is reason to do so. Generally the suggested rules are: be at least 12 characters long, check the password against lists of known passwords.