Originator of web's Password Rules admits he was wrong

A complicated, mixed up password is not any more secure than a password that’s all lower-cased letters. The reason the internet told us (and continues to tell us) to make a password with numbers and capital and lower-cased characters and punctuation in it is a paper called “Digital Identity Guidelines.” This nightmare of a paper was published at the National …