- cannot be one of the last 10 passwords you used
- cannot be any password you have used in the last 15 years
- must contain all of the following characters ๐๐แน๐แ๐ ๐แแญ๐
- can only consist of lowercase letters
- must contain at least nine numbers that sum to be no more than 11 and no less than 9
- numbers cannot repeat
- must contain one uppercase letter
- must end with '.jpg'
- first four characters hex values must be the same summed value as the last nine characters
- signal each character with the tone of a virgin bell towards the heavens
Bi-weekly password change policy is the bane of my existence.
My favorite was a biweekly password change, on the payroll portal that was also biweekly.
Correct horse battery staple.
Of course there's an xkcd for that:-)
I just recently had to make a password for some website.
The requirements were to use at least one capital letter, at least one number, and EXACTLY ONE of a short list of special characters in your password. It also could be no longer than 10 characters.
Major wtf moment.
It was a financial site wasn't it. They're the worst for not updating security guidelines.
There are various reasons I hate the banks I use. One of the top reason is this ancient obsolete password rule.
The biggest reason to hate my banks is they're forcing to use their android app and policing how I can use my phone by refusing to run if I have accessibility service on, and developers options enabled.
I just keep updating my reviews as they are anti disabled people[1].
[1]~~Please correct me on the proper term because I'm ESL and I forgot.~~
I've used this website in the past to generate passwords. It is based on this xkcd comic.
Most FOSS password managers will also do it, like KeePass.

I don't use KeePass anymore, but from this screenshot and the documentation I believe that it does not generate passphrases as defined by this xkcd comic.
I've configured this for KeePassXC iirc, but you're right, the default config does not generate XKCD passwords. Just saying it's not impossible.
Bitwarden does this out of the box.
Just adding if someone reading wants to use passphrase generation that's built in.
Cybersecurity - Memes
Only the hottest memes in Cybersecurity