Tech companies don’t help the situation by telling people to have at least eight characters in their passwords. That’ll give people the idea that eight is good enough.