This is the same method that appears in wizard.py, may be we should move this to leap.bitmask.util.password.basic_check?