In article , Chris
wrote:

So how do you autogenerate passwords (eg with keepass) when many
institutions (particularly banks) won't tell you their password policy
(length, what characters are accepted/not accepted etc etc)?

How do you generate *any* password if the institution won't tell you the
rules? I can't think of any that don't.

any institution that tells you the rules is *less* secure than one that
doesn't. the bad guys now know what combinations to ignore, thereby
*reducing* the potential possibilities.