When entering a password, in addition to use zxcvbn - it would be helpful to show immediately feedback to the user if the password does not match the password criteria.
This should be done when setting up:
- a admin account on first install
- on user creation
- on password change