Rules

• Recommend a minimum password length, such as 8 characters or more. Longer passwords are generally more secure against brute-force attacks
• Discourage users from including personal information, such as their name, birthdate, or significant dates, in their passwords. Hackers may easily guess or obtain this information.
• Recommend periodically changing passwords, even if they have not been compromised. Regularly updating passwords adds an extra layer of security to user accounts.