OWASP Passfault improves on password strength and password policies.