Do randomized password generators usually have a standardized set of characters which they can produce as output?

I am trying to implement some logic for password validation.

It would be frustrating for a user if the logic which is implemented to validate the password does not match that of the logic of password generators in general. (In the title I used the example of the Google Chrome / Chromium Browser password generation feature, but this question doesn’t have to give answers specific to Chrome.)

It would seem obvious that characters A-Z, a-z, 0-9 should be included as permissable characters in any validation logic.

Some special symbols should obviously be included, such as !, @, #, $, %, ^, &, *, ,, .,, -, +, _, =, ?.

Others I am not sure about. I don’t recall ever seeing a password generated with either a back-quote, a single-quote or a double-quote character.

Similarly, parenthesys (), brackets [] and braces {}?

I am fairly sure greater than/less than (angle brackets) <> are commonly used by password generation logic.

Remaining special symbols on US keyboards include ~|/.

The password validation function I am designing is relatively simple.

• It checks the length to ensure the password is a minimum of 10 characters
• It checks that only permissable characters are included
• It doesn’t require a minimum count of upper case/lower case/numeric or special characters (some strong passwords, such as a sequence of 4 random words, don’t require these)

The problem I face is I don’t know which special characters should be considered as permissable vs not permitted.

It might be confusing to include types of quotes for example, because a password like "apple" becomes ambiguous to a human reader. (Are the quotes included?)