I think these are the only settings:
Imho, this is a reasonable Contribute > Feature request?
The downside of making passwords tougher to be acceptable is that you might exasperate users during sign-up and actually stop them completing it? The priority of this will surely vary by community?
@1378434153 another way of solving this might be to prevent local login and force a social/auth login which has a stronger regime.
Another thing to consider is forcing 2FA on all accounts.