Combining three random words is more effective than using complex combinations for passwords, says the National Cyber Security Council (NCSC). An NCSC blog post dated August 9 explains how this train of thought or “think random” helps to “keep the bad guys out.” The post follows on from a previous one from nearly five years ago, “Three random words or #thinkrandom.” According to the post, enforcing “complex requirements” for passwords is a poor defense against guessing attacks.

Read full article on Infosecurity