Of those ten rules, nearly half of them hurt password strength. The others make it harder for users to remember their passwords which will lead them to frustrat

Of those ten rules, nearly half of them hurt password strength. The others make it harder for users to remember their passwords which will lead them to frustration and, ultimately, bad passwords. Austin#1 is a perfectly valid password according to those rules. zxcvbn says it'd take 2.508 seconds to crack that.