In reply to Unai.

That's at least partially meaningless though. The problem in the vast majority of cases is not the strength of the password. In almost all cases it's not the password that's cracked. Either the password was obtained by some sort of phishing attack or they found their way into the system by some other means and stole the complete password database or other data.

It also seems to assume a brute force attack. A decent system would lock you out after a certain number of attempts or create (longer and longer) intervals to slow down any attack like that.

While complex passwords are important they are also overrated. I have no idea how difficult it would be to integrate features like the ones mentioned into Wordpress, but I should think they would be much more helpful than reminders about complex passwords.

Also nothing stops people using their Wordpress password in all kinds of other places, where the password database might be stolen and cracked. Which then in turn is used to gain access to other places including possibly your Wordpress account.