<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>(Sent earlier to <span style="text-indent: 4px;">dev-identity list, but relevant to you all as well.)</span></div><div><br></div>"91% of all user passwords sampled all appear on the list of just the top 1,000 passwords."<br><br><a href="https://xato.net/passwords/more-top-worst-passwords/#.UqWy83i9LCS">https://xato.net/passwords/more-top-worst-passwords/#.UqWy83i9LCS</a><br><br>If true, it's hard to argue that passwords alone are strong enough to secure accounts. Create a blacklist? I would love to help people concoct their own password scheme and improve password management at the same time.<br><div><br></div><div><span style="orphans: 2; text-align: -webkit-auto; widows: 2;">Ryan Feeley</span></div><div apple-content-edited="true"><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Product Designer, Identity</div><div>Mozilla UX</div><div>IRC: rfeeley</div></div>
</div>
<br></body></html>