Is it insecure to display the number of characters when users enter a new passphrase?

When users are entering a new passphrase somewhere, it’s helpful to provide feedback on the number of characters received by the system.
In a user experience (UX) test I just ran, my user created a passphrase in her password manager, and t… Continue reading Is it insecure to display the number of characters when users enter a new passphrase?