We should talk about passwords next time we meet up. I spent a week locked in a room with Angela Sasse (sec.cs.ucl.ac.uk/people/m_ang...) who led the NCSC password guidelines team. There’s good stuff in the advice underpinned by actual research rather than the usual random tech-bro assumptions.