Ben Foster • 7/10/2012

Password policies do not enforce security

The article criticizes common password policies, like those from Barclaycard, for being overly restrictive and actually reducing security by forcing users to create forgettable passwords. It argues that complex rules lead to passwords being written down and suggests better alternatives like allowing memorable phrases and using two-factor authentication via SMS, similar to Google's approach.

0 comments

#user experience #authentication #cybersecurity