Minimum Password Length
How long is your password? 8? Most of site today require minimum password length of 8 characters. How long it take to crack the password by brute force? The result might shock you.
It only need 5 hours to crack a 8 characters password. Minimum is just a minimum. We need more length for a more secure password. Combining lowercase, uppercase, number, symbol dramatically increase numbers of variation to guess. Each characters added to password boost crack time exponentially.
We need to choose sustainable password that crack time exceed owner’s lifetime. That is 12 characters.
Remember, over years, password weaken as computational power increase. We may need to increase minimum password length in the future.