https://blog.frankleonhardt.com/2016/how-long-should-my-password-be/