NIST update password tips

I knew it. I have been using the new technique all along.

 

Ya i knew about this also but unfortunately most sites require you to have the characters.

 

What am I missing? I understand that the bottom one might be easier to remember, but the bottom one has 25 characters of only lowercase letters (26). The top one has 11 characters of lower and uppercase numbers (52), numerals (10), and symbols/punctuation (at least another 10). 11 to the 72nd power is a crap ton larger than 25 to the 26th power. Or is being 50 years old put too much time between now and when I learned this crap in high school?

 

Check to make sure your email wasn't part of an external compromise at https://haveibeenpwned.com/

Don't reuse passwords
Use keepass to store passwords
Use two factor if possible

 

It would be 72 to the 11th power, not 11 to the 72nd power. (also 26 to the 25th power)

 

It's hell to get old.

 

so better to actually type out my birthday then than to use it numerically for all my passwords?