Hacker News new | past | comments | ask | show | jobs | submit login

No. 8 characters is too short - no matter if you add in special symbols and upper/lower case. It's too easy to brute-force crack. You need something longer. And once you make it longer, the extra alphabet size from upper/lower case and symbols matters less.



I was not talking about brute-force protection... I'm talking about meeting the password complexity requirements of the servers (same as the article)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: