Ridiculous password policies are a constant frustration to users and security professionals alike. They aren’t making us more secure and contribute to the problems of managing passwords.
We get it, passwords are a problem. They’re a pain to remember, they’re always too short (or too long), and the people we trust them with can’t even seem to keep them out of hackers’ hands. But are the alternatives any better?