Stop forcing your arbitrary password rules on me
"Password must contain 1 uppercase letter, 1 lowercase letter, and 1 number."http://ryanwinchester.ca/post/stop-forcing-your-arbitrary-password-rules-on-meWith a rule like that, the password
Abcd1234would pass your validation, butmu-icac-of-jaz-doadwould not.
Ryan makes an excellent suggestion to replace password rules by an entropy estimator like Zxcvbn.