NIST simply recommends a minimum length for passwords, all other requirements don't really provide worthwhile security.