Are longer passwords always better, and why ban certain words?
Microsoft guidance from 2016 appears to argue that requiring passwords longer than about eight characters may not improve security. That seems counterintuitive, since a genuinely random longer password…