very often when you create a new account there are very often restrictions or arbitrary properties that reduce the number of brute force combinations required a

very often when you create a new account there are very often restrictions or arbitrary properties that reduce the number of brute force combinations required and provide a set of rules to generate a password the user has to know what the password rules are, the hacker doesnt but when it does it has less work to do. i dont know how we might separate the twain other than limiting creation and trial of passwords