2 ms·

I think the biggest reason for the lack of a password standard is that the risk profile / threat model is not the same across all websites.