Entropy based passwords are undoubtedly next level security.

In our organisation we stumbled upon a problem where security dept required specific criteria for passwords (min 8 character for instance). Level 3 security password fulfils this criteria BUT level 3 security (own experimentation) requires minimum 10-12 chars. With no specific prompts on how to set the right password many of our users are getting frustrated and unable to create an account.

I’m sure we re not the only org dealing with this issue perhaps we could integrate the min char length to create a way to plug this password system into more traditional once