Password rules are one of those bike-shedding moments project managers and clients love so much. To show their brilliance, they invent complex password rules, define database field lengths and ask for infinite scroll on everything. Can't expect a code monkey to do the job right.