https://jasonlamb.me/security-vs-complexity-how-to-set-a-secure-password/