The current NIST password guidelines are in NIST SP 800-63B-4, Digital Identity Guidelines: Authentication and Authenticator Management, published as final in July 2025 and superseding the earlier SP 800-63B....