This is connected with password length, in that the longer the password, the more secure it is. Thus, b1gb0y97 is no where near as secure as PresidentNeighborFriend3502. In addition to being more secure, passphrases have the benefit of being much more memorable than passwords with complexity (e.g. i changed to 1 and o changed to 0) . Here's a visual explanation as to why:
MBU requires passwords to contain the following types of characters:
- One uppercase letter
- One lowercase letter
- One digit
- At least 8 characters long
- You cannot use the last 10 passwords you've previously used (This is to protect against compromised credentials from continuing to cause problems in the future. It also increases security by forcing work passwords to be different from personal passwords).