On: Passwords Evolved: Authentication Guidance for the Modern Era

[welder]

If it's for your website, start by adding a password strength meter using zxcvbn[1]. For example:

https://github.com/MorrisJobke/strengthify

[1]: https://github.com/dropbox/zxcvbn