Verify Passwords Meet Security Policy

NIST 800-63B recommends passwords of at least 8 characters (prefer 15+) and banning known common passwords — both checked here automatically.

Mandatory complexity rules (must include uppercase, number, symbol) are less effective than simply requiring longer passwords. Length beats complexity.

The checklist output here can help employees understand exactly what makes their password weak and what changes are needed to meet policy.

For admin and privileged accounts, require passwords that score "Strong" (score 4) with at least 60 bits of entropy — shown in the entropy display.