@maxleibman When people busy themselves writing "guidelines" instead of, gee, making this stuff secure and convenient on a factual basis.
<Insert Password XKCD here>
My workplaces larger overlord org still uses the abysmal "Use a new password every X months" rule despite all IT's petitions and recommendations of MS and standardisation bodies against it.
Ticking checkboxes instead of making an actual effort always rubs me wrong.