You can totally use emojis as passwords. You can probably even make this a policy at your company.

Edit: I thought this was an obvious enough joke, but just to clear things up: Only do this if you hate your company and everyone working there.

  • ö and ä can be risky because there are multiple ways in which they can be encoded. ä can either be the backwards compatible “a with umlaut” or it can be “a” + joiner + “diaeresis”. Software is supposed to normalise this, but it you’ve ever used a non-Latin character in your Windows username you’ll realise how little software actually bothers to normalise input.

    That means you can run into things like “if I enter my password on my PC it works, but if I enter it on my phone it doesn’t, unless I use this specific keyboard app”.