Reposting: Fake “Unicode.” ↙️ on Twitter
“Because it keeps coming up, how about a thread on Emoji in passwords. So we (and you) can link to it in the future.
Should they be allowed? For all practical purposes they can't not be. So, yes.
Should they be heavily warned against? Yes.
But why? Well...”