Of passwords and people: measuring the effect of password-composition policies
Encountering Stronger Password Requirements: User Attitudes and Behaviors