88% of breached passwords are 12 characters or less
-
A recent study of 800 million breached passwords found that 88% of passwords used in successful cyberattacks were 12 characters or less.
https://www.securitymagazine.com/articles/99059-88-of-breached-passwords-are-12-characters-or-less