Zxcvbn: realistic password strength estimation
> Bank of America doesn’t allow passwords over 20 characters, disallowing correcthorsebatterystaple. Passwords can contain some symbols, but not & or !, disallowing the other two passwords<p>Can anyone elaborate why "&" or "!" wouldn't be allowed?