>https://blog.codinghorror.com/password-rules-are-bullshit/
>
>I keep pointing people at the XKCD cartoon, but Atwood expounds further on the topic.
>
>If you're a dev or sysadmin in a position to influence password policy, PLEASE do the right thing.

Hmm. Since most servers just store a hash value of the password why would longer be better ?