https://www.advent-im.co.uk/security-think-tank-firms-need-to-support-good-password-practices/