Nothing in a hack can prevent a password cracker from cracking a password - that would be magic, and we don't deal in magic here - tbh 7 characters seems a little low as a default in this situation as the mini-phrases that make up the passwords are a known factor... in this instance I would sughgest users use a default of 15 or 20 characters at least - as it's pronounceable it is less of an issue it being longer...
|