Most of my users cant even type these passwords in, let alone remember them for more than 10 seconds...

A user really should not need to remember a password that YOU or your SYSTEM generated. They just need to be able to type it once, and then define a password for THEMSELVES. Two benefits: (1) you have less liability if you don't know their passwords, and (2) they can design passwords that they can remember.

Security and Convenience are typically opposed. The easier, the weaker. The stronger, the more complicated. The challenge is not in developing secure rules, but in encouraging secure behavior. Make the rules too strict and the users will break them (password on PostIt). Make the rules too lax and the users will drive right through them (password eq userid). Help them understand the implications of security and liability, and how to choose strong yet mnemonic passwords on their own.

Update: Yes, I implied but didn't stipulate that the best practice is to generate a use-once password and force a password change.

--
[ e d @ h a l l e y . c c ]


In reply to Re: Words without a Dictionary by halley
in thread Words without a Dictionary by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":



  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.