Length does matter (ha), but how you create and manage a password often matters just as much, if not more. A long password that's predictable or reused across accounts can still be cracked, leaked or ...

... or other absurdly short lengths? I remember that back before Chase bought them, Bank One's website has a <B>six fucking character limit</B>. My banking ...