New posts in Password Policy

Is it common practice to log rejected passwords?

An alternative to traditional passwords: is there some merit to this idea?

Why do some websites force users to come up with difficult passwords?

Do spaces in a passphrase really add any more security/entropy?

Regulations that specify password length?

Passwords - any statistics on user behavior?

Sharing wifi at a business - Bad Policy?

Should I have a maximum password length?

What chars should I not allow in passwords?

How long should the maximum password length be?