Can someone explain the algorithm that is used to determine that a proposed password is sufficiently secure? Specifically I was forced to 'upgrade' my password to something more secure, and it kept rejecting passwords for being 'easily guessed' but only when I would add an additional character to make the password longer. So, for example, if I suggested:
'money123me' this would be acceptable, but if I tried
'money123mecow' this was considered to be easily guessed and rejected.
It makes no sense that a longer password would be considered less secure, so it makes me concerned that there are some strange limitations in the password system that make it vulnerable.
Thanks,
Brian