Stanford’s password policy shuns one-size-fits-all security

[J65nko]

From http://arstechnica.com/security/2014...-all-security/

Stanford University network engineers have unveiled a refreshingly enlightened password policy. By allowing extremely long passcodes and relaxing character complexity requirements as length increases, the new standards may make it easier to choose passwords that resist the most common types of cracking attacks.

[IdOp]

A non-technical article on the topic of password policy choice,

Why Canada's banks have weaker passwords than Twitter or Google

It seems to come down to cost of (a) attracting and retaining customers, and (b) insurance.

Still, even if they want to let people use a bad password, for their (short term) convenience, why can't they support better passwords for those willing to use them?

[thirdm]

Originally Posted by IdOp

Still, even if they want to let people use a bad password, for their (short term) convenience, why can't they support better passwords for those willing to use them?

Because it won't fit in a PIC 999999?