I still stand by xkcd 936.

Since no one can know which characters you used, you have to assume all/most. Throw one character in there to be safe, in the middle of a word.

Banks on the other hand: no you’re only allowed 4 numbers!