Can long passwords be secure and usable?
Of passwords and people: measuring the effect of password-composition policies