My dd has a school iPad and needs to keep more than 20 passwords to different accounts including email, submission of homework for every subject and passwords to every app in the iPad. All of the iPad is controlled by the school (though you bought it with your own money), you cannot do or change anything in it.
Now if it were the Spanish inquisition of the middle ages who set this password policy, it would have been more merciful than it is in my dd's school. No same password in any two of the more 20 accounts.
No words from dictionary included in any part of the password, no names, family names or any known persons, companies etc. Nor the same in reverse order (sirap not allowed, as it is reversed Paris).
At least two digits (but not in sequence, "12" now allowed) and at least two capital letters and at least two non alphabetical and non-digit). No previously used password on any of the 20 accounts allowed on any account.
No more than half characters of one of the previous passwords in the new password: if you previously had L2ondon52-=, new password cannot be L3ondon73(} because of "ondon".
Change password on every account once a month.
This is really painful and my dd just cried yesterday when she wrote an important email to her teacher and couldn't send it as she was required to change the password and she could not invent a new one complying with the rules and finally her account was locked.
And all this password policy is because very often the accounts of girls in the school are hacked. And how does this hacking happens? Did anybody really crack a password to someone's account? No. Just one girl told her password to another girl who logged into her account and began sending outrageous emails under her friend's name. Or some girl received a scam email and clicked the link in it and her account was compromised. What does it have to do with the passwords?