u/Stryde_

I find it kind of hard to believe that there are people actively trying to guess/brute force logins for generic services. And also that even if their is, that having special characters/numbers whatever actually tangibley increases security.

Yeah it makes sense to take precaution for some instances where there is actual financial risk to an account, or in cases where someone who knows you tries to be intrusive. But in general, surely any non target specific account breach is just from a large data leak or access through alternate methods.

Does it actually make a tangible difference?