NIST PROPOSES BARRING SOME OF THE MOST NONSENSICAL PASSWORD RULES

Summary from the TLDR newsletter

Some of the most vexing password requirements include mandatory resets, required or restricted use of certain characters, and the use of security questions.