Yes. I agree.


Yes. I agree. Complexity doesn't help much with shorter passwords. What matters, often, is the length of the password, and that it is not a well-known word that can be used in a dictionary attack.