So if you want your password to be hard to guess, you should choose something that this process will miss. My advice is to take a sentence and turn it into a password. Something like “This little piggy went to market” might become “tlpWENT2m”. That nine-character password won’t b...
You rarely need to actually know your password now, just a fingerprint or face recognition to enter your saved password on the website. Allowing the user to stay signed in is not an issue in my book. It’s limited to a particular device, and it’s not generally considered a security ...