Anyone still including special characters is behind the curve frankly. Working in Cybersecurity it pisses me off when anything enforces the special character requirement. It adds no security but plenty of inconvenience.
Of course it was. Adding a special character only increases complexity slightly by adding a few extra permutations to check for each character. Adding extra characters increases complexity by orders of magnitude.
Create a password that's twenty characters long but easy to type and remember and it will never get brute forced. The way passwords actually get popped isn't by brute force attempts to authenticate with every permutation anyway. Far more likely that you get popped by a keylogger or something that pulls the password hash from memory, or an authentication token getting intercepted. No one's getting into your account by guessing your password, that's old tech. Making passwords include a bunch of special characters is nothing more than security theater for the masses.
YOU DIDN'T EVEN INCLUDE A SPECIAL CHARACTER
Anyone still including special characters is behind the curve frankly. Working in Cybersecurity it pisses me off when anything enforces the special character requirement. It adds no security but plenty of inconvenience.
So the XKCD comic was right when it said you should use a long compound word like "horsebatterystapler" for a password?
Of course it was. Adding a special character only increases complexity slightly by adding a few extra permutations to check for each character. Adding extra characters increases complexity by orders of magnitude.
Create a password that's twenty characters long but easy to type and remember and it will never get brute forced. The way passwords actually get popped isn't by brute force attempts to authenticate with every permutation anyway. Far more likely that you get popped by a keylogger or something that pulls the password hash from memory, or an authentication token getting intercepted. No one's getting into your account by guessing your password, that's old tech. Making passwords include a bunch of special characters is nothing more than security theater for the masses.
I'malumberjackandi'mokay,IsleepatnightandIworkallday.
^ Impenetrable.