> Also add an indicator or separate rating for requirements that make the passwords too easy to guess This, naively[0], is all requirements except minimum leng

> Also add an indicator or separate rating for requirements that make the passwords too easy to guess This, naively[0], is all requirements except minimum length. Every requirement reduces the problem space for would-be attackers and increases the cognitive burden for users. [0] I recognise that with many modern techniques, password-cracking utilises common patterns rather than a brute-force approach.