>>Hi Everyone!
>>
>>Hope everyone had a great weekend!
>>
>>Had a questions for you password gurus. We are wanting to implement "strong" passwords in our applications and as I've been searching the internet I've not yet found any real standardizations for what constitutes the strength of a password. Does anyone know if there is some place that this is defined or is it just left up to the individual as to what constitues weak, poor, fair, good, strong, excellent, etc?
>>
>>Thanks for your input!
>
>I think someone has this in their signature
>
>The two laws of password security
> 1. Never write your password down.
> 2. If you can remember your password, it's too simple.


Actually many security professionals would now say rather have a strong password and write it down than opt for a weaker one in order to be able to remember it.