The Psychology of Security for the Home Computer User
A large-scale study of web password habits