I totally believe that university password requirements are the strictest. The general standards for a &quot;strict&quot; password are &gt;N characters, 3 of 4 character classes required, and sometimes a blacklist of passwords.<p>The standards for my university? The ones I figured out (they don&#x27;t spell a guideline out for you until you violate it):
* &gt;N characters
* 3 of 4 classes
* No substring of &gt;5 characters can match a dictionary word (which apparently includes &quot;anita&quot; o_O)
* Can&#x27;t have your name in there anywhere
* No three consecutive characters can be the same or a run (so no 111, 123, 321, ghi, etc.)
* Can&#x27;t be any of your last 10 passwords
* Please change every 9 months<p>There&#x27;s probably a few more that I haven&#x27;t had cause to discover yet.