the only place situation where such rules can matter is if you already _massively_ messed up security (most fundamental rule of handling passwords is to never

the only place situation where such rules can matter is if you already _massively_ messed up security (most fundamental rule of handling passwords is to never store them anywhere, never log them either, b etc. they should go straight to the hashing function and no where else)