If you’ve ever used Google Chrome’s password generator to create a password ... In its guidelines, NIST makes it clear that the benefit of complexity is usually outweighed by the downsides.