When implementing a password strength checker lately I relied mainly on https://github.com/dropbox/zxcvbn (which is great) but added in a check for correct horse battery staple (and variants). Probably not that important in the big scheme of things but I thought it might get a chuckle and/or some respect if anyone happened to activate that code path.