In case you missed it, EPA is yet again changing it's password requirements. This attempt to strengthen security will ultimately reduce security.

As noted security expert Bruce Schneier notes, the National Institutes of Standards and Technology (NIST) recently published its four-volume SP800-63b Digital Identity Guidelines. As Bruce notes, the document "makes three important suggestions when it comes to passwords: