Check password for 8 characters, 1 uppercase, 1 lowercase and 1 number

I wonder if by default we have a non-as-tight policy.  For example, just require a minimum length.