OH: Rules for strong passwords don’t work, researchers find. Here’s what does. “In an experiment, users created passwords on a system that simply required them to enter 10 characters. Then the system rated the passwords with the lab’s password strength meter and gave tailored suggestions for stronger passwords. Test subjects were able to come up with secure passwords that they could recall up to five days later. It worked better than showing users preset lists of rules or simply banning known bad passwords.”