Complicated Passwords Useless for Security

Complicated Passwords Useless for Security

It turns out that everyone who has had to come up with a complicated password for an online login site hasn’t done anything to improve their security. Many sites have us creating passwords with combinations of capital letters, lower case letters, numbers and characters…all of it without any benefit. This idea that these complicated passwords would improve security originated in a paper for the National Institute for Standards and Technology and became gospel. The creator of that paper, and many others, now say it was wrong. Here is the story in Slash Gear.