Password Composition Rules Are Counter­productive

from blog Aleksandr Hovhannisyan, | ↗ original
Registration systems often require that passwords contain certain characters. But this is counterproductive and encourages bad habits that can weaken users' passwords.