Answers are grounded in this paper and cite their sources.
Theory on passwords has lagged practice, where large providers use back-end smarts to survive with imperfect technology.
No takes yet. Share an insight, caveat, or question.
Bonneau et al. (2015) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: