I recently had to (for work) create an account on website with a password “strength” indicator and the following limitations:

- At least one upper case

- At least one lower case

- At least one number, but not as the first character and no two numbers in a row

- No special characters

- Maximum characters: 8

There was a minimum too but I can’t recall what it was. Hopefully 7 for maximum security.

My randomly generated password from my password manager got a “medium” on their strength scale.