Hi Anton

This is a great find which I hadn't come across. Many thanks for passing it on! I've now had a chance to look over it (sorry for delay responding) and will update the article to include the link. There are some limitations though:

* Only applies to Firebase Auth with Identity Platform (which isn't the default, and switching to it has certain other potentially undesirable effects)

* Isn't currently available - you have to contact Google to ask them to enable it

* Limited to the types of policies which dictate number of X,Y,Z type of character, rather than something like zxcvbn which is OWASP-recommended.

Definitely a step in the right direction though, and at least some of the above will likely improve in time.

- Tom