> That very first tweet touched on the first reason why it doesn't matter: banks aggressively lock out accounts being brute forced. Until a hacker steals the s

> That very first tweet touched on the first reason why it doesn't matter: banks aggressively lock out accounts being brute forced. Until a hacker steals the salted password database and brute forces it as much as they like. A truly strong password is secure even when the attacker has the salted version. (Anyone who tells you that it's completely impossible for a hacker to ever get their password file is lying either to you or to themselves.)