Yes, password must meet the complexity requirement.
It should be 8 digits with special characters to avoid brute force attack
You mean something like this?
.0tmH,-o$dNHI&fEkVl@zNd0mOXD/-5DN,9FCf)4JS-7#!o]li9cYDA_*ck_ou8R@%lZiy{48H+]Pc2Enka7aL9tdx0#)}g8av(.
Instead of this:
iamanidiotpleasestealmybitcoins