You shall not pass: Practical password advice for ordinary humans http://cdla.oxycreates.org/tips/you-shall-not-pass/#more-2995