enforcing a minimum length, increases the set of possible passwords. "enforcing complexity" rules, constrain the set of possible passwords, reducing benefit fr

enforcing a minimum length, increases the set of possible passwords. "enforcing complexity" rules, constrain the set of possible passwords, reducing benefit from enforced minimum length.