Design Rules for User Passwords

Most applications that involve creating an account have specifications for what your password can be. Things like "8 or more characters" or "must include 3 types of characters." It doesn't really matter what you decide is best, but our current system of allowing literally anything won't cut it. Design the rules and add it as an issue titled something like "Enforce Rules on New User Passwords. If you really feel inclined, you can even go ahead and implement it yourself.