> You only need that to impose a greater character width against brute force attacks. That is the only value in high entropy. That's exactly the reason I meant

> You only need that to impose a greater character width against brute force attacks. That is the only value in high entropy. That's exactly the reason I meant - to make brute forcing take much longer. > Only on a touch screen Yep, certainly worse on a touch screen, but I hate entering long passwords even on a keyboard - it's OK if it's a field that let's you see what you type, but if it's just asterisks, then I find it hard not seeing that visual feedback.