Crossbearer wrote:I once read somewhere that a longer password is always better even though it's actually a readable sentence.
For example "SkndiSh33")!!m#" is not as good a password as "BradKAlwaysListensToNoodlyChristianGoodyTwoShoesMetal57TimesADay!".
...primarily because a user will forget a password like that. The best type of password is a long, sentence-like password with special characters in L337 speak:
See, I only replaced vowels with the corresponding L337 character into a sentence I can remember. I also opted to type only one word in the sentence in upper case so it can satisfy many security protocols enforced by enterprise environments and replaced the word "and" with an ampersand which is still semantically correct.