Your password must contain at least one symbol.
There are studies that show that that restriction decreases security, not increases it [1].
That’s all the friction I needed to not try this website which, from the outside looking in, seems like it might be amazing.
[1]: encouraging users to improve password security and memorability. (Yildirim, Mackie 2019)
But then also recognized "the participants in the experimental group spent time to read the information and applied the given methods to produce passwords, maybe just to help a research study by participating. However, in real life, users may not make an effort to read the information provided in the password guidelines unless they have to. Zakaria [64] suggested that one possible way to overcome this is to make reading and understanding the password guidelines compulsory before constructing a password." So even if we were to follow the findings here, the result would be to create _more_ friction, not less.
—
That having been said, friction is subjective. So we’ll have to agree to disagree about your last point.