Password strength is really a question of how many guesses an attacker would need. Every extra character multiplies that number, which is why length matters far more than swapping an a for an @. Understanding this lets you stop memorizing rules and start choosing passwords that hold up.

Source: [Dev.to](https://dev.to/pulkitgovrani/how-strong-should-a-password-be-length-vs-complexity-dg1)

Sponsored