[Head416]

People need to understand that when they set the bar too high for the user (complexity, frequency of change, lack of uniformity across systems) they reduce security because the passwords end up on a post-it note on the monitor.