This documents reviews the US National Institute of Standards and Technology (NIST) guidelines for password complexity and non-password authentication systems.