And not in the user’s last X passwords! And doesn’t contain their name, address etc! And changes every X days!

Literally writing code to do this rn, even tho I pushed back with modern theories… IT security “experts” set policy using just enough knowledge to be dangerous

One of the banned words hardcoded previously was “monkey”, needless to say I am proud to carry on this tradition