You definitely don't want to be using these

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 1 year ago

Because of composition rules. Fewer characters, much easier to brute force guess.

So when a site tells you 'Your password must be at least 6 characters long', and they just want to get past it to get to the content, the number is already on their mind.

  • source
  • parent