The science on password security vs usability
Researchers at Carnegie Mellon University’s CyLab Security and Privacy Institute have developed a science-based policy for creating passwords that balances security and usability.
In their work, the researchers verified what most users already knew: Including upper case letters, digits and symbols has a negative impact on usability. Surprisingly, the team also found those kinds of requirements don’t increase password strength as much as others, said CyLab Director Lorrie Cranor, who is also a professor in the Institute for Software Research and the department of Engineering and Public Policy.
Submitted by Anonymous
on