Passwords are long recognised as an area in which users undermine protection. However, while they have shortcomings, two points should be noted before completely dismissing them. Firstly, guidance and enforcement of good practice is often limited, even on leading sites. Secondly, users’ selections can be positively influenced by ensuring that guidance is provided.

The talk was held at the Public Research Centre Henri Tudor, Luxembourg on 22 October 2014. [(CC) BY-NC-SA 2.0 UK]