Enforce authentication and password rules

By imposing the use of specific rules, as opposed to free choice, you ensures that the rules are adopted uniformly. Any deviation, deliberate or not, is rendered technically impossible.

If the rules concerning the complexity, renewal etc. of passwords are not made obligatory (but only 'recommended'), certain users will not apply them for reasons of ease or habit.