Interesting read about what we have known all along about passwords.

In a lot of ways, the results shouldn't surprise anyone, given what we know about the operation of human memory: if you give users a task that's nearly impossible, they won't do it.