Password Complexity

Comments

# ccerino said on June 5, 2008 02:28 PM:

I am a firm believer in passphrases ( or really long passwords).

On my wires - your password must be at least 17 characters.

Harder to crack

Less need for changing

Easier for the end users to remember ( and HOPEFULLY keeping them from writing them down and leaving it around). Much easier in my experience for Joe User to remember "I grew up in a small town" ( a password/passphrase with 25 characters <including spaces>) then "Xp3Ku5jhK" and having to change it every 30, 60, 90 days ( or whatever someone's policies are.

My users have to change their passwords/passphrases twice a year.