nFront Password Filter allows you to enforce the Stanford Password Policy. The Stanford Password Policy is a length-based complexity policy. Most password requirements consider complexity to be a variation in character types (lower, upper, numeric, and special). In 2014, Stanford University adopted a new password policy that garnered a bunch of attention. The policy essentially has 4 different ranges for password length and ties each range to complexity requirements. Here is the list of ranges and requirements
The Stanford Policy was certainly a step in the right direction and it is a great improvement for most companies. However, we suggest using a minimum length that is 10, 12 or more and using rules like dictionary blacklisting and checking for breached passwords. You can also consider requiring passphrases (longer passwords that contain spaces).