 36.NIST provides guidelines for digital authentication standards and does away with most knowledge-based authentication methods.A stricter standard has been drafted on more complicated passwords that at least 8 characters long or passphrases that are at least 64 characters long.