From that and lines like this one, I'm guessing the author does not use a password manager: > use more than 8 characters, or use a password manager if you are

From that and lines like this one, I'm guessing the author does not use a password manager: > use more than 8 characters, or use a password manager if you are really nervous Also the article mentions that pw managers will get you long passwords, which will protect against brute force, but doesn't really mention the more significant benefit, that they protect against password reuse. Not to mention they're far more convenient than trying to remember strong passwords. So don't use a PW manager only if you're really nervous. Just use one, full stop. (But yeah, set password length at something like 13-14 characters. More than that doesn't provide any real world benefit, and there will occasionally be cases where you have to type it in. Plus you'll hit fewer snags with poorly designed systems enforcing max pw length.)