Security guidelines insist we implement password complexity: