What’s a Good Password? NIST says One that hasn’t been stolen

The article summarizes NIST draft guidance advising organizations to block passwords found in breached or common-password lists, move away from arbitrary complexity and forced-expiration rules, and adopt defenses such as secure hashed storage, rate throttling, and multi-factor or behavioral authentication to improve account security.