How strong is the password you use for your e-mail account? When was the last time you changed it? Your e-mail is the gateway to pretty much the rest of your security – someone who has captured your e-mail can use it to reset many of your other passwords. Yet, the top 10 passwords that people use are: “123456, 123456789, qwerty, password, 111111, 12345678, abc123, 1234567, password1, and 12345.” There are several reasons for this, but one is that people will generally trade security for convenience.
In addition to this, network security experts don’t always appreciate this fact or its implications. I was in a meeting at work about this topic, and the IT guys actually stated that their password policy is – use a hard alphanumeric, don’t write it down anywhere, use a different password for every login, and change it every 30 days. This is literally impossible for the vast majority of the population. People will just shrug at these silly recommendations, and use “123456.” A better recommendation, meeting people half-way, is to use a password which consists of three independent words that are each memorable to you but someone else would not easily guess.
http://theness.com/neurologicablog/index.php/privacy-in-the-age-of-ai/