This talk will be the first-ever public report that analyses Taiwanese user passwords in depth. I will break down Taiwanese user passwords into multiple common patterns, discuss their weaknesses, give insight into building better password practices and policies, offer actionable advice for password assessment during Red/Blue team cyber security drills, and provide insight into real-world threats and the techniques they use to crack “very strong” passwords.