New NIST password recommendations – 5.1.1 Memorized Secrets
pages.nist.gov