NIST

For years, password creation advice has consisted of variations on “use a mix of lower case letters, upper case letters, numbers, and special characters.” There’s also “change passwords