Requiring passwords to follow strict rules makes them less secure, not more: https://blog.codinghorror.com/password-rules-are-bullshit/