In June 2017  the National Institute of Standards and Technology revised its SP 800-63 "Digital Identity Guidelines " which includes some juicy details about passwords and authentication for websites and online services