I’ve been doing a bit of research for a small project to update project management practices and to refresh my knowledge of 2019’s best practices.

This is a pretty decent high level summary of how to approach password strength.