New password strength requirement: must contain at least 42 characters, at least five of which must NOT be included in the Unicode standard.
@liw Blast. Maybe I'll make up a secret language based on hand signals combined with tonal inflections .... but I'm pretty sure the IT department and it's password checkers would totally not get it...
@ignaloidas I think not. If you can enter a character in the password field, so can attackers. The only secure way is for no-one to be able to enter the password to a computer.
Lars and friends