Why length matters more than complexity
Each additional character increases the number of combinations exponentially. An 8-character password can be cracked in hours; a 20-character one would take millennia.
Our recommendations
- Standard account — at least 16 characters.
- Sensitive account (email, banking) — 20+ characters.
- Master password — 24 characters or a long passphrase.