Password policy needs upgrading

[mossywell]

"Selected password does not meet the criteria (letters & numbers only, 6 characters or longer). Please choose a password that does."

Letters and numbers only? Please allow other characters as letters and number only doesn't meet my password policy.

[mario]

The policy will remain, and you can strengthen your password by making it longer.

Between many different UIs Gixen offers, add-ons, databases, scripting languages, etc, it's been really nice not to have to deal with encoding / decoding / escaping.

This virtually eliminated both development effort to properly support special characters, and subsequent support issues.

[Rickajho]

For what it's worth over a year ago I had seen at least one security report that said passwords forced to use at upper case letters and special characters are no more secure than passwords that don't use them. Just more annoying to recall and/or type. Almost all places I do financial business with have since dropped any mandatory uppercase and special character requirements.

Rick