Maybe we should tell users to use passphrases instead.
The 8 char limit is very low now. The limite should be raised to 30 characters.
The 8 char limit is very low now. The limite should be raised to 30 characters.
My basic suggestions are to choose 4+ words that are not a common phrase, song name, quote, etc. And make sure you still use both lowercase and uppercase letters, plus throw in some symbols in non obvious places (e.g., don't convert your a's into @ signs). It doesn't need to be as random as a shorter password, but it still shouldn't look like a normal sentence.
Maybe one day password will just be 1MB files kept on people's computer instead of remembering a short string.