We’re told more and more every day that password security is essential. We’re constantly being asked to create new passwords. We’re also being told not to write our passwords down anywhere or worse, just use the same password for every instance, lest one password give a thief access to your entire kingdom.
There’s a whole laundry list of don’ts which I won’t bother rehashing, but not much advice as to dos. The reality is that this just isn’t feasible. IT Help desks everywhere moan about password reset cases that take up most of their time.