Since I believe a password is the user's responsibility I use the UI to inform the user what a safe password is because most people have no clue.

For example:

Choose your password: A safe password contains many different characters, for example a sentence.