I hate password rules
NIST best practice recommendations state:* Require more than 8 characters* Don't require special characters* Don't force the user to reset their password* Do check for compromised passwords* Require MFA* ...All very sensible.https://auth0.com/blog/dont-pass-on-the-new-nist-password-gu...