Concept - Better Passwords

Goal: eliminate guessable passwords while still easy for the user to remember (s.20). Techniques: user education, computer-generated passwords, reactive checking, proactive checking.

	Reactive password checking	Proactive password checking
When	system periodically runs its own password cracker	when the user selects a password
Action	cancels guessed passwords and notifies the user	checks if allowable, rejects if not
Cost / verdict	can be costly in resources	must balance user acceptability and strength; “likely the best solution”

(s.20)

Related: Concept - Password Cracking, Concept - Password Vulnerabilities and Countermeasures. Appears in 03 User Authentication - Chunk 01 (s.1-33).