Compliance

NIST SP 800-63B favors length and true randomness over forced composition rules; Microsoft's default policy requires characters from at least 3 of the 4 categories above. This generator satisfies both when length is 12+ and at least 3 categories are enabled.