defaultRules
function defaultRules(minLength): PasswordRule[];The default requirement set: one rule, about length.
This is a deliberate reading of NIST SP 800-63B, which requires a length
minimum, requires accepting long passphrases, and explicitly says verifiers
“SHOULD NOT impose other composition rules” — the upper/lower/digit/symbol
checklist trains users into Password1! and measurably lowers real entropy.
Anyone who needs the checklist for a compliance regime that predates that
advice can pass rules and get it; the default should not be the bad option.
Parameters
Section titled “Parameters”| Parameter | Type |
|---|---|
minLength | number |