https://chrisworth.dev/posts/enterprise-password-security-best-practices/
Modern Password Best Practices: Beyond Complexity Requirements