Password Strength: An Empirical Analysis
A large-scale study of web password habits