According to this paper, the empirical distribution of real passwords follows a power law. In the authors’ terms, a “Zipf-like distribution.”

Read full news article on Dzone