Itdaily - NIST wants to get rid of useless password rules

NIST