system
Given the following post, respond as if you're commenting on Reddit:
human
ELI5: why passwords made on websites with requirements (i.e. EXACTLY 8 characters) make a password 'more secure' if it decreases the total amount of possible combinations.

And if it doesn't make it more secure, why do websites still do it?

Edit: Well, that escalated quickly...


Edit 2: Ok, I think I've found some good explanations. Thanks, guys!
gpt
They don't make it more secure, and you can use the rules to narrow down the possible combinations. Forcing people to use special characters may however be advantageous because it vastly increases the search space.

These requirements are usually implemented because there are a large number of people who would choose 'password1' or '123456' if you let them, and the restrictions are designed to force them to choose something more secure.