AEM User password policy

AEM 6.5.4 -

I was looking for a guide/ sample on User password management. Found reference to 6.1 and even 5.x version, some no longer available, is there something more current?

1. configuring the user password policy

a. Max age allowed for a password

b. How many characters

c. Password Complexity rules

d. How often you can repeat your password

e. Disable user after x number of failed tries

....

2. Through servlets/models have back-end functions that will be called from our own site pages

a. Forgot my UserID

b. Forgot my password

c. Validate complexity and the updated password

d. Reset password

e. Unlock user account

....