But in practise nobody uses 100 character long strings. Security is the intersection of real users with systems, not imaginary ones.
Multiple websites I use daily have that length of password or longer.
But in practise nobody uses 100 character long strings. Security is the intersection of real users with systems, not imaginary ones.