Which is why I use a password manager, of course :) There simply should not have to be this trade off. I know how to adjust the generator for the rules. But on

Which is why I use a password manager, of course :) There simply should not have to be this trade off. I know how to adjust the generator for the rules. But on my phone, that’s a fair amount of extra work and you have to know how to do it. For non-tech peers, they won’t know how to learn that, and they’ll likely not understand the trade-off well enough to do it anyways. So we’re back at the beginning: passwords need to be secure by default — without going through any extra steps, or we need a different approach that is secure without extra work.