NIST Password Guidelines: The Rules Now Prohibited
The current NIST standard forbids several habits most password policies still enforce. Here is each clause, and what Microsoft and Google let you change.
Identity and access
How small teams prove who is signing in: password policy, password managers, SSO, MFA and passkeys.