An excellent article on how to enforce pass phrases and why they outperform traditional ‘secure’ passwords with complex rules.
It’s also much easier, and less frustrating for your users.
I recently had to change my Atlassian password. The password input placeholder read ‘A few words you’ll find easy to remember’. Nice to see they’re following this advice.