NIST recommendation: Use random generated passwordsgithub.com/usnistgov2 pointsfulldecent10 years ago