- spellable passwords would be worth trying (passphrases)
- avoid similar looking symbols (1lI)
- also min length of each parameter (like 2 numbers, 3 letters, 2 symbols)