How can I enforce user password complexity?

I’m not sure I understand the premise of the question? To strengthen a password you would indeed include a mix of letters in different cases, numbers and symbols. Preferably random, and unique for each site/login.

A password manager is a useful tool as well.

This is general password advice though, and not specific to Discourse.