Surely I'm missing something?

byTuze

357 followers

10 years ago

I'm a bit security conscious, not quite obsessive, but heading that way.

So I was wondering why we only have an 8 character password securing our WordPress sites - 8 digits is not hard to crack if you are from the dark side, and guessing the user name does not need much thinking time.

Where security matters, I'm not really happy unless I have a 12 digit password and have changed the user name to something less predictable.

I realise that I can click the reset password thingy within WA now and again but that is still only 8 characters. Within WordPress, the password length and complexity is more flexible (I think, I may be on thin ice here), but WA will not remember it, so you'll probably need a password manager like LastPass or Dashlane.

Am I missing a trick here, or do we need provision within WA for bigger and better WordPress passwords?