GPU-based password cracking

KPMG’s advice to their clients regarding password length and complexity should be one of the following (this applies to all the hashes that were researched): • Nine or more characters with lower and upper case letters, digits and punctuation marks.