With our TeddyPass app we are pretty loose on what users can use as their login password, but we employ pretty robust techniques to prevent brute-force attacks

With our TeddyPass app we are pretty loose on what users can use as their login password, but we employ pretty robust techniques to prevent brute-force attacks and other common methods. With our system key user data (like stored usernames, passwords, and the description of the account entry) is fully encrypted based on the user's password and other factors. As a result we can't retrieve their data even if we wanted to, so it's in our best interests to allow people to use just about any password they can comfortably remember (within reason).