Hot take: those long random passwords are overkill and I stopped using them
My whole email got locked out last Tuesday because I had a 24 character password I could never remember and typed it wrong too many times. The reset link went to an old phone number I didn't have anymore, so I spent 3 hours on the phone with support trying to prove it was me. Now I use simple 4 word passphrases like "purple chair seven moon" and I haven't been locked out since. A friend who does IT for a bank in Denver says length beats weird symbols almost every time anyway. Has anyone else had a lockout force them to change how they make passwords?