I went to change my password after receiving emails suggesting that someone from China was accessing my account.
Requiring a completely unique password seems like a ridiculous requirement, and I almost gave up after multiple failed attempts to change it.
There’s no way I’m actually going to be able to remember the password, so I’ll probably end up having to have a password reset done and go through this process again the next time I want to log in.
I understand that you’re trying to protect users, and I appreciate that, but this seems like overdoing it.