@oyam Hmm... have m/any sites used a per user decision on password rules? user1 gets to use symbols and letters but not numbers; user7 gets to use numbers and letters but not symbols; etc. How would that affect expected entropy?