How to Memorize a Random 60-Bit String
A large-scale study of web password habits