Let's imagine a theoretical world in which every service had a 12 or 15 character limit on their passwords and no other restrictions. Does anyone really believ

Let's imagine a theoretical world in which every service had a 12 or 15 character limit on their passwords and no other restrictions. Does anyone really believe that the list of most common passwords would not contain equally inane entries as the ones presented in this article, just modified to be longer? "qwerty" would just become "qwertyuiop", etc. People using these passwords are just filling the minimum requirements with something easy to remember. Making them fill more characters wouldn't really change that. The only reason the most common passwords are short is because so many services allow short passwords. Users gonna be users no matter how long their passwords need to be. That said, I agree with the article in spirit. I hate password restrictions. I just think that the argument about most common passwords being short is a spurious one.