No discussions on passwords are complete without a reference to https://xkcd.com/936/ ... as far as I can see, 16-character passwords with as many obscure characters as possible is not considered best practice according to Randall.