Best practices for creating password forms

I stumbled across a link to this page in a Chrome DevTools console warning. IMHO it's a concise, reasonable, actionable list of clueful suggestions, so I figured I'd share.