@nodeham I understood what you were asking, but to be honest zxcvbn was implemented by us quite a long time ago, and I no longer remember what the specifics are.
However, I can almost guarantee it is nothing as simple as requiring symbols and letters. zxcvbn has its own heuristics for determining password guessability, including such metrics like "closeness" to other simple passwords, or how quickly a computer may brute force guess it (given some assumptions).
So I don't think there's a direct comparison between what we have and what you want 🙁
