Annoying Password Rules Actually Make Us Less Secure

A recent paper by researchers at Princeton University has highlighted the poor or ineffective password practices that are making logging into sites, apps and services more complicated and annoying. These policies can increase the chance of accounts being breached, especially if users are not using additional security measures such as two-factor authentication. The paper identified compelling routine password changes, forcing users to use complex passwords, and not allowing users to reuse passwords as some of the most common bad practices.