To use a good password, I was thinking about adding special characters. I remember that some login services don't allow all characters. Perhaps it depends also on the keyboard layout.
Could these special characters be used in a common password?
+ @ * # ç % & / ( ) = ? ^ ! [ ] { } - _ : ; > < | , .
Special characters don't add as much to security as you might think. They increase the number of possible characters, but the most powerful multiplier comes from password length.
Let's say you have a very limited character set consisting of [A-Z][a-z][0-9], giving you 62 possible characters. Therefore a 10 character password has 62^10 possible passwords, or 8.3*10^17. Now add 10 special characters, and the number of possibilities goes to 72^10 possible passwords, or 3.2*10^18.
Choosing an 11 character password from the simple set, you have 62^11 possible passwords, or 5.2*10^19, which is another order of magnitude stronger than adding symbols to a 10 character password.
Of course, if you're picking only dictionary words, even with symbol substitutions, John the Ripper will likely shred the password in short order. Pick long passwords that aren't dictionary words, and you'll make a real difference in your security.
If the login service is programmed properly there shouldn't be a problem with you using any of those characters. In fact, it is suggested you use a special character!
When I say "programmed properly" its because sometimes a programmer will not set up his database to support "UTF-8" and then a character such as "ç" might not work...
It depends on where and how you store them. The character set is what comes into play here. As long as all parts in the chain that use the password are setup to use a character set that allows these characters than yes, it's perfectly fine.
I say all parts because if one part of the chain doesn't support them, it can cause all sorts of problems.
However if this causes a problem, I'd suggest you stop using that service if at all possible and alert them to the issue.
