Quote:
Originally Posted by cSpooge
by no standards is an 8 character password strong.
|
I disagree. No one is breaking a 8 character alphanumeric password through brute force, as long as your password looks more like this &bS8a1>9Z, and less like bobby123. Especially if you have any sort of lockout in place for failed attempts.
In reality, what does adding the 9th, 10, or 15th character add? Nothing except an increased chance the user will re-use, write down, or otherwise compromise the security of the password, like making easier to socially reverse engineer it by using a common name, phrase etc.