Interesting read about what we have known all along about passwords.
In a lot of ways, the results shouldn’t surprise anyone, given what we know about the operation of human memory: if you give users a task that’s nearly impossible, they won’t do it.