Password (English Wikipedia)

Morris, Robert & Thompson, Ken (1979). "Password Security: A Case History". Communications of the ACM. 22 (11): 594–597. CiteSeerX 10.1.1.135.2097. doi:10.1145/359168.359172. S2CID 207656012. Archived from the original on 22 March 2003. {{cite journal}}: Cite uses deprecated parameter |citeseerx= (help)
Shay, R.; Komanduri, S.; Kelley, P. G.; Leon, P. G.; Mazurek, M. L.; Bauer, L.; Cranor, L. F. (2010). "Encountering stronger password requirements: user attitudes and behaviors". Proceedings of the Sixth Symposium on Usable Privacy and Security. pp. 1–20. doi:10.1145/1837110.1837113. Retrieved 30 April 2025.

adsabs.harvard.edu (Global: 14^th place; English: 9^th place)

ui.adsabs.harvard.edu

Tsokkis, Pieris; Stavrou, Eliana (June 2018). "A password generator tool to increase users' awareness on bad password construction strategies". 2018 International Symposium on Networks, Computers and Communications (ISNCC). IEEE. pp. 1–5. Bibcode:2018isnc.conf...35T. doi:10.1109/ISNCC.2018.8531061. ISBN 978-1-5386-3779-1.
T Matsumoto. H Matsumotot; K Yamada & S Hoshino (2002). Van Renesse, Rudolf L. (ed.). "Impact of artificial 'Gummy' Fingers on Fingerprint Systems". Proc SPIE. Optical Security and Counterfeit Deterrence Techniques IV. 4677: 275. Bibcode:2002SPIE.4677..275M. doi:10.1117/12.462719. S2CID 16897825.

arstechnica.com (Global: 473^rd place; English: 338^th place)

Goodin, Dan (3 June 2019). "Microsoft says mandatory password changing is "ancient and obsolete"". Ars Technica. Retrieved 1 November 2022.

bbc.co.uk (Global: 11^th place; English: 10^th place)

news.bbc.co.uk

Kent, Jonathan (31 March 2005). "Malaysia car thieves steal finger". BBC News. Retrieved 28 May 2026.

books.google.com (Global: 3^rd place; English: 3^rd place)

Mark Bando (2007). 101st Airborne: The Screaming Eagles in World War II. Mbi Publishing Company. ISBN 978-0-7603-2984-9. Archived from the original on 2 June 2013. Retrieved 20 May 2012.
Michael E. Whitman; Herbert J. Mattord (2014). Principles of Information Security. Cengage Learning. p. 162. ISBN 978-1-305-17673-7.

broadcom.com (Global: low place; English: low place)

community.broadcom.com

"Ten Windows Password Myths" : "NT dialog boxes ... limited passwords to a maximum of 14 characters"
"Ten Windows Password Myths" : Myth #7. You Should Never Write Down Your Password

bugcharmer.blogspot.com (Global: low place; English: low place)

The Bug Charmer: Passwords Matter Archived 2 November 2013 at the Wayback Machine. Bugcharmer.blogspot.com (20 June 2012). Retrieved on 30 July 2013.
Alexander, Steven. (20 June 2012) The Bug Charmer: How long should passwords be? Archived 20 September 2012 at the Wayback Machine. Bugcharmer.blogspot.com. Retrieved on 30 July 2013.

burtleburtle.net (Global: low place; English: low place)

Bob Jenkins (11 January 2013). "Choosing Random Passwords". Archived from the original on 18 September 2010.

businesstoday.in (Global: 2,918^th place; English: 1,469^th place)

Singal, Nidhi (17 September 2021). "No password for Microsoft Account: What does passwordless authentication mean?". Business Today. Retrieved 12 April 2022.

cam.ac.uk (Global: 569^th place; English: 354^th place)

cl.cam.ac.uk

"The Memorability and Security of Passwords – Some Empirical Results" Archived 19 February 2011 at the Wayback Machine (pdf)
"your password ... in a secure place, such as the back of your wallet or purse."
Bonneau, Joseph; Herley, Cormac; Oorschot, Paul C. van; Stajano, Frank (2012). The quest to replace passwords: a framework for comparative evaluation of Web authentication schemes (Report). University of Cambridge, Computer Laboratory. doi:10.48456/tr-817.

cert.org (Global: low place; English: low place)

"CERT IN-98.03". 16 July 1998. Archived from the original on 16 October 2009. Retrieved 9 September 2009.

cesg.gov.uk (Global: low place; English: low place)

"The problems with forcing regular password expiry". IA Matters. CESG: the Information Security Arm of GCHQ. 15 April 2016. Archived from the original on 17 August 2016. Retrieved 5 August 2016.

cnet.com (Global: 447^th place; English: 345^th place)

news.cnet.com

Kotadia, Munir (23 May 2005) Microsoft security guru: Jot down your passwords. News.cnet.com. Retrieved on 20 May 2012.
"Gates predicts death of the password". CNET. 25 February 2004. Archived from the original on 2 April 2015. Retrieved 14 March 2015.

cnet.com

"Google security exec: 'Passwords are dead'". CNET. 25 February 2004. Archived from the original on 2 April 2015. Retrieved 14 March 2015.

codehaus.org (Global: low place; English: low place)

jira.codehaus.org

"You must provide a password between 1 and 8 characters in length". Jira.codehaus.org. Retrieved on 20 May 2012. Archived 21 May 2015 at the Wayback Machine

columbia.edu (Global: 554^th place; English: 368^th place)

cs.columbia.edu

"Password". Columbia University Computer Science. Archived from the original on 23 April 2007. Retrieved 30 May 2026.

computer.org (Global: 6,549^th place; English: 4,616^th place)

"Authentciation at Scale". IEEE. 25 January 2013. Archived from the original on 2 April 2015. Retrieved 12 March 2015.

cryptosmith.com (Global: low place; English: low place)

"The Strong Password Dilemma" Archived 18 July 2010 at the Wayback Machine by Richard E. Smith: "we can summarize classical password selection rules as follows: The password must be impossible to remember and never written down."

darkreading.com (Global: low place; English: low place)

Ericka Chickowski (3 November 2010). "Images Could Change the Authentication Picture". Dark Reading. Archived from the original on 10 November 2010.

doi.org (Global: 2^nd place; English: 2^nd place)

Ranjan, Pratik; Om, Hari (6 May 2016). "An Efficient Remote User Password Authentication Scheme based on Rabin's Cryptosystem". Wireless Personal Communications. 90 (1): 217–244. doi:10.1007/s11277-016-3342-5. ISSN 0929-6212. S2CID 21912076.
Temoshok, David; Proud-Madruga, Diana; Choong, Yee-Yin; Galluzzo, Ryan; Gupta, Sarbari; LaSalle, Connie; Lefkovitz, Naomi; Regenscheid, Andrew (1 August 2025). NIST SP 800-63-4:: Digital Identity Guidelines (PDF) (Report). Gaithersburg, MD: National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-63-4. Retrieved 27 May 2026.
Morris, Robert & Thompson, Ken (1979). "Password Security: A Case History". Communications of the ACM. 22 (11): 594–597. CiteSeerX 10.1.1.135.2097. doi:10.1145/359168.359172. S2CID 207656012. Archived from the original on 22 March 2003. {{cite journal}}: Cite uses deprecated parameter |citeseerx= (help)
Temoshok, David; Fenton, James L; Choong, Yee-Yin; Lefkovitz, Naomi; Regenscheid, Andrew; Galluzzo, Ryan; Richer, Justin P (1 August 2025). NIST SP 800-63B-4:: Digital identity guidelines - authentication and authenticator management (PDF) (Report). Gaithersburg, MD: National Institute of Standards and Technology. p. 30. doi:10.6028/NIST.SP.800-63B-4. Retrieved 27 May 2026.
Shay, R.; Komanduri, S.; Kelley, P. G.; Leon, P. G.; Mazurek, M. L.; Bauer, L.; Cranor, L. F. (2010). "Encountering stronger password requirements: user attitudes and behaviors". Proceedings of the Sixth Symposium on Usable Privacy and Security. pp. 1–20. doi:10.1145/1837110.1837113. Retrieved 30 April 2025.
Tsokkis, Pieris; Stavrou, Eliana (June 2018). "A password generator tool to increase users' awareness on bad password construction strategies". 2018 International Symposium on Networks, Computers and Communications (ISNCC). IEEE. pp. 1–5. Bibcode:2018isnc.conf...35T. doi:10.1109/ISNCC.2018.8531061. ISBN 978-1-5386-3779-1.
Bonneau, Joseph; Herley, Cormac; Oorschot, Paul C. van; Stajano, Frank (2012). The quest to replace passwords: a framework for comparative evaluation of Web authentication schemes (Report). University of Cambridge, Computer Laboratory. doi:10.48456/tr-817.
T Matsumoto. H Matsumotot; K Yamada & S Hoshino (2002). Van Renesse, Rudolf L. (ed.). "Impact of artificial 'Gummy' Fingers on Fingerprint Systems". Proc SPIE. Optical Security and Counterfeit Deterrence Techniques IV. 4677: 275. Bibcode:2002SPIE.4677..275M. doi:10.1117/12.462719. S2CID 16897825.
Bonneau, Joseph; Herley, Cormac; Oorschot, Paul C. van; Stajano, Frank (May 2012). "The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes". 2012 IEEE Symposium on Security and Privacy. pp. 553–567. doi:10.1109/SP.2012.44. ISBN 978-1-4673-1244-8.

educatecomputer.com (Global: low place; English: low place)

Tariq, Muneeb (26 March 2025). "10 Uses of Passwords". Educate Computer. Retrieved 13 November 2025.

espacenet.com (Global: 950^th place; English: 813^th place)

worldwide.espacenet.com

US patent 8046827, Corella, Francisco, "Access Control of Interaction Context of Application", published 18 December 2008

fedscoop.com (Global: low place; English: low place)

"NSTIC head Jeremy Grant wants to kill passwords". FedScoop. 14 September 2014. Archived from the original on 18 March 2015. Retrieved 14 March 2015.

fidoalliance.org (Global: low place; English: low place)

"Specifications Overview". FIDO Alliance. 25 February 2014. Archived from the original on 15 March 2015. Retrieved 15 March 2015.

forbes.com (Global: 71^st place; English: 54^th place)

Joseph Steinberg (12 November 2014). "Forbes: Why You Should Ignore Everything You Have Been Told About Choosing Passwords". Forbes. Archived from the original on 12 November 2014. Retrieved 12 November 2014.

fortune.com (Global: 647^th place; English: 421^st place)

Roberts, Jeff John (11 May 2017). "Experts Say We Can Finally Ditch Those Stupid Password Rules". Fortune. Archived from the original on 28 June 2018.

gizmodo.com (Global: 763^rd place; English: 486^th place)

Biddle, Sam (11 July 2011). "Anonymous Leaks 90,000 Military Email Accounts in Latest Antisec Attack". Gizmodo. Archived from the original on 14 July 2017.

iacr.org (Global: 6,361^st place; English: 4,159^th place)

eprint.iacr.org

Brown, Daniel R. L. (2005), Prompted User Retrieval of Secret Entropy: The Passmaze Protocol, 2005/434, retrieved 27 May 2026

ibm.com (Global: 1,369^th place; English: 968^th place)

www-03.ibm.com

"IBM Reveals Five Innovations That Will Change Our Lives within Five Years". IBM. 19 December 2011. Archived from the original on 17 March 2015. Retrieved 14 March 2015.

imperva.com (Global: low place; English: low place)

imperva.com

"Consumer Password Worst Practices (pdf)" (PDF). Archived (PDF) from the original on 28 July 2011.

blog.imperva.com

"Military Password Analysis". 12 July 2011. Archived from the original on 15 July 2011.

infosecurity-magazine.com (Global: low place; English: low place)

Lurey, Craig (9 June 2022). "Why the Password Is Not Dead". Infosecurity Magazine. Retrieved 13 November 2025.

itpro.com (Global: low place; English: low place)

Walker, Dale (14 October 2019). "How do hackers get your passwords?". IT Pro. Retrieved 27 May 2026.

kiplinger.com (Global: low place; English: low place)

Redding, David E.; Features, AEP published in (19 April 2019). "Your Estate Could Have a Serious Password Problem". Kiplinger.com. Retrieved 17 August 2024.

lyquix.com (Global: low place; English: low place)

Lyquix Blog: Do We Need to Hide Passwords? Archived 25 April 2012 at the Wayback Machine. Lyquix.com. Retrieved on 20 May 2012.

macworld.com (Global: 3,602^nd place; English: 2,320^th place)

Fleishman, Glenn (24 November 2015). "Write your passwords down to improve safety — A counter-intuitive notion leaves you less vulnerable to remote attack, not more". MacWorld. Retrieved 28 April 2021.

marketwire.com (Global: low place; English: 8,211^th place)

"Confident Technologies Delivers Image-Based, Multifactor Authentication to Strengthen Passwords on Public-Facing Websites". marketwire. 28 October 2010. Archived from the original on 7 November 2010.

mcpmag.com (Global: low place; English: low place)

Butler, Rick A. (1 September 2004). "Face in the Crowd". Microsoft Certified Professional Magazine Online. Archived from the original on 27 June 2006. Retrieved 27 May 2026.

microsoft.com (Global: 263^rd place; English: 259^th place)

research.microsoft.com

Florencio, Dinei; Herley, Cormac; van Oorschot, Paul C. "An Administrator's Guide to Internet Password Research" (PDF). Microsoft Research. Archived from the original (PDF) on 14 February 2015. Retrieved 27 May 2026.
"The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes" (PDF). IEEE. 15 May 2012. Archived from the original (PDF) on 19 March 2015. Retrieved 11 March 2015.

support.microsoft.com

How to prevent Windows from storing a LAN manager hash of your password in Active Directory and local SAM databases Archived 9 May 2006 at the Wayback Machine. support.microsoft.com (3 December 2007). Retrieved on 20 May 2012.

mit.edu (Global: 476^th place; English: 340^th place)

people.csail.mit.edu

Massachusetts Institute of Technology (1965). The Compatible Time-Sharing System (PDF) (2nd ed.). p. 282.

modernlifeisrubbish.co.uk (Global: low place; English: low place)

Stuart Brown "Top ten passwords used in the United Kingdom". Archived from the original on 8 November 2006. Retrieved 14 August 2007.. Modernlifeisrubbish.co.uk (26 May 2006). Retrieved on 20 May 2012.

ncl.ac.uk (Global: 5,403^rd place; English: 3,489^th place)

homepages.cs.ncl.ac.uk

"Password Memorability and Security: Empirical Results" (PDF). Newcastle University School of Computing. Archived from the original (PDF) on 14 April 2012. Retrieved 27 May 2026.

nist.gov (Global: 708^th place; English: 742^nd place)

csrc.nist.gov

"password". Computer Security Resource Center: Glossary. National Institute of Standards and Technology. Retrieved 13 July 2026.
"authentication protocol". Computer Security Resource Center: Glossary. National Institute of Standards and Technology. Retrieved 13 July 2026.
"Passphrase". Computer Security Resource Center: Glossary. National Institute of Standards and Technology. Retrieved 17 May 2019.

nvlpubs.nist.gov

Temoshok, David; Proud-Madruga, Diana; Choong, Yee-Yin; Galluzzo, Ryan; Gupta, Sarbari; LaSalle, Connie; Lefkovitz, Naomi; Regenscheid, Andrew (1 August 2025). NIST SP 800-63-4:: Digital Identity Guidelines (PDF) (Report). Gaithersburg, MD: National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-63-4. Retrieved 27 May 2026.
Temoshok, David; Fenton, James L; Choong, Yee-Yin; Lefkovitz, Naomi; Regenscheid, Andrew; Galluzzo, Ryan; Richer, Justin P (1 August 2025). NIST SP 800-63B-4:: Digital identity guidelines - authentication and authenticator management (PDF) (Report). Gaithersburg, MD: National Institute of Standards and Technology. p. 30. doi:10.6028/NIST.SP.800-63B-4. Retrieved 27 May 2026.

nytimes.com (Global: 7^th place; English: 7^th place)

Vance, Ashlee (10 January 2010). "If Your Password Is 123456, Just Make It HackMe". The New York Times. Archived from the original on 11 February 2017.
Urbina, Ian; Davis, Leslye (23 November 2014). "The Secret Life of Passwords". The New York Times. Archived from the original on 28 November 2014.

ofcom.org.uk (Global: 5,969^th place; English: 3,088^th place)

"Adults Media Use and Attitudes Report 2026" (PDF). Ofcom. 2 April 2026. pp. 21–22. Retrieved 26 May 2026. [M]ore than a quarter (26%) [of online adults] re-use passwords across different accounts ... 13% of online adults who re-use passwords ... said their email or social media accounts had been hacked

patents.google.com (Global: 1,154^th place; English: 606^th place)

US20110055585A1, Lee, Kok-Wah, "Methods and Systems to Create Big Memorizable Secrets and Their Applications in Information Engineering", published 3 March 2011

pcmag.com (Global: 1,442^nd place; English: 915^th place)

Rubenking, Neil J. (17 April 2026). "I Ditched Password Generators and Made a Better One in Excel. Here's How". PCMag. Retrieved 28 May 2026.
Seltzer, Larry. (9 February 2010) "American Express: Strong Credit, Weak Passwords" Archived 12 July 2017 at the Wayback Machine. Pcmag.com. Retrieved on 20 May 2012.

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

Thomas, Keir (10 February 2011). "Password Reuse Is All Too Common, Research Shows". PC World. Archived from the original on 12 August 2014. Retrieved 10 August 2014.

psu.edu (Global: 299^th place; English: 159^th place)

citeseerx.ist.psu.edu

Morris, Robert & Thompson, Ken (1979). "Password Security: A Case History". Communications of the ACM. 22 (11): 594–597. CiteSeerX 10.1.1.135.2097. doi:10.1145/359168.359172. S2CID 207656012. Archived from the original on 22 March 2003. {{cite journal}}: Cite uses deprecated parameter |citeseerx= (help)

pythonhosted.org (Global: low place; English: low place)

"passlib.hash - Password Hashing Schemes" Archived 21 July 2013 at the Wayback Machine.

sans.org (Global: low place; English: low place)

Kristen Ranta-Haikal Wilson (9 March 2020). "The Debate Around Password Rotation Policies". SANS Institute. Archived from the original on 17 October 2025. Retrieved 31 October 2022.

schneier.com (Global: low place; English: low place)

Schneier on Security discussion on changing passwords Archived 30 December 2010 at the Wayback Machine. Schneier.com. Retrieved on 20 May 2012.
Bruce Schneier : Crypto-Gram Newsletter Archived 15 November 2011 at the Wayback Machine 15 May 2001
"Real-World Passwords". Schneier on Security. 14 December 2006. Retrieved 30 May 2026.

securitybrief.co.nz (Global: low place; English: low place)

Williams, Shannon (21 October 2020). "Average person has 100 passwords - study". SecurityBrief New Zealand. TechDay. Retrieved 28 April 2021.

semanticscholar.org (Global: 15^th place; English: 8^th place)

api.semanticscholar.org

Ranjan, Pratik; Om, Hari (6 May 2016). "An Efficient Remote User Password Authentication Scheme based on Rabin's Cryptosystem". Wireless Personal Communications. 90 (1): 217–244. doi:10.1007/s11277-016-3342-5. ISSN 0929-6212. S2CID 21912076.
Morris, Robert & Thompson, Ken (1979). "Password Security: A Case History". Communications of the ACM. 22 (11): 594–597. CiteSeerX 10.1.1.135.2097. doi:10.1145/359168.359172. S2CID 207656012. Archived from the original on 22 March 2003. {{cite journal}}: Cite uses deprecated parameter |citeseerx= (help)
T Matsumoto. H Matsumotot; K Yamada & S Hoshino (2002). Van Renesse, Rudolf L. (ed.). "Impact of artificial 'Gummy' Fingers on Fingerprint Systems". Proc SPIE. Optical Security and Counterfeit Deterrence Techniques IV. 4677: 275. Bibcode:2002SPIE.4677..275M. doi:10.1117/12.462719. S2CID 16897825.

sleuthsayers.org (Global: low place; English: low place)

Lundin, Leigh (11 August 2013). "PINs and Passwords, Part 2". Passwords. Orlando: SleuthSayers.

sophos.com (Global: low place; English: low place)

nakedsecurity.sophos.com

Wisniewski, Chester (18 August 2016). "NIST's new password rules – what you need to know". Naked Security. Archived from the original on 28 June 2018.

springer.com (Global: 182^nd place; English: 172^nd place)

link.springer.com

Ranjan, Pratik; Om, Hari (6 May 2016). "An Efficient Remote User Password Authentication Scheme based on Rabin's Cryptosystem". Wireless Personal Communications. 90 (1): 217–244. doi:10.1007/s11277-016-3342-5. ISSN 0929-6212. S2CID 21912076.

std.com (Global: low place; English: low place)

world.std.com

"To Capitalize or Not to Capitalize?" Archived 17 February 2009 at the Wayback Machine. World.std.com. Retrieved on 20 May 2012.
"Should I write down my passphrase?" Archived 17 February 2009 at the Wayback Machine. World.std.com. Retrieved on 20 May 2012.

techlicious.com (Global: low place; English: low place)

"Why You Should Lie When Setting Up Password Security Questions". Techlicious. 8 March 2013. Archived from the original on 23 October 2013. Retrieved 16 October 2013.

techradar.com (Global: 1,513^th place; English: 964^th place)

"The Best Free Password Managers of 2025: Secure Your Credentials". TechRadar. 27 July 2022. Retrieved 13 November 2025.

techtarget.com (Global: 3,908^th place; English: 3,051^st place)

searchsecurity.techtarget.com

"What is graphical password? - Definition from Whatis.com - see also: GUA, graphical user authentication". searchsecurity.techtarget.com. 4 June 2007. Archived from the original on 19 February 2011. Retrieved 27 May 2026.

theguardian.com (Global: 16^th place; English: 11^th place)

Schofield, Jack (10 March 2003). "Roger Needham". The Guardian.

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

Pauli, Darren (16 July 2014). "Microsoft: You NEED bad passwords and should re-use them a lot". The Register. Archived from the original on 12 August 2014. Retrieved 10 August 2014.
"NATO site hacked". The Register. 24 June 2011. Archived from the original on 29 June 2011. Retrieved 24 July 2011.

thireus.com (Global: low place; English: low place)

blog.thireus.com

Cracking Story – How I Cracked Over 122 Million SHA1 and MD5 Hashed Passwords « Thireus' Bl0g Archived 30 August 2012 at the Wayback Machine. Blog.thireus.com (29 August 2012). Retrieved on 30 July 2013.

time.com (Global: 84^th place; English: 63^rd place)

techland.time.com

Techlicious / Fox Van Allen @techlicious (8 August 2013). "Google Reveals the 10 Worst Password Ideas". Time. Archived from the original on 22 October 2013. Retrieved 16 October 2013.

trendmicro.com (Global: low place; English: low place)

"2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M - Security News". Trend Micro. 18 May 2016. Retrieved 11 October 2023.

troyhunt.com (Global: low place; English: low place)

Hunt, Troy (26 July 2017). "Passwords Evolved: Authentication Guidance for the Modern Era". Retrieved 22 March 2019.

uio.no (Global: 2,380^th place; English: 2,625^th place)

folk.uio.no

AlFayyadh, Bander; Thorsheim, Per; Jøsang, Audun; Klevjer, Henning. "Improving Usability of Password Management with Standardized Password Policies" (PDF). Archived (PDF) from the original on 20 June 2013. Retrieved 12 October 2012.

usenix.org (Global: 7,359^th place; English: 4,657^th place)

Password Protection for Modern Operating Systems Archived 11 March 2016 at the Wayback Machine (pdf). Usenix.org. Retrieved on 20 May 2012.

waelchatila.com (Global: low place; English: low place)

Wael (18 September 2005). "Using AJAX for Image Passwords - AJAX Security Part 1 of 3". Wael Chatila. Archived from the original on 16 June 2006. Retrieved 27 May 2026.

web.archive.org (Global: 1^st place; English: 1^st place)

"The Roman Military System". About.com. Archived from the original on 4 March 2016. Retrieved 27 May 2026.
Mark Bando (2007). 101st Airborne: The Screaming Eagles in World War II. Mbi Publishing Company. ISBN 978-0-7603-2984-9. Archived from the original on 2 June 2013. Retrieved 20 May 2012.
Morris, Robert & Thompson, Ken (1979). "Password Security: A Case History". Communications of the ACM. 22 (11): 594–597. CiteSeerX 10.1.1.135.2097. doi:10.1145/359168.359172. S2CID 207656012. Archived from the original on 22 March 2003. {{cite journal}}: Cite uses deprecated parameter |citeseerx= (help)
Vance, Ashlee (10 January 2010). "If Your Password Is 123456, Just Make It HackMe". The New York Times. Archived from the original on 11 February 2017.
"Managing Network Security". Archived from the original on 2 March 2008. Retrieved 31 March 2009.{{cite web}}: CS1 maint: bot: original URL status unknown (link). Fred Cohen and Associates. All.net. Retrieved on 20 May 2012.
"Password Memorability and Security: Empirical Results" (PDF). Newcastle University School of Computing. Archived from the original (PDF) on 14 April 2012. Retrieved 27 May 2026.
Techlicious / Fox Van Allen @techlicious (8 August 2013). "Google Reveals the 10 Worst Password Ideas". Time. Archived from the original on 22 October 2013. Retrieved 16 October 2013.
Lyquix Blog: Do We Need to Hide Passwords? Archived 25 April 2012 at the Wayback Machine. Lyquix.com. Retrieved on 20 May 2012.
Stuart Brown "Top ten passwords used in the United Kingdom". Archived from the original on 8 November 2006. Retrieved 14 August 2007.. Modernlifeisrubbish.co.uk (26 May 2006). Retrieved on 20 May 2012.
The Bug Charmer: Passwords Matter Archived 2 November 2013 at the Wayback Machine. Bugcharmer.blogspot.com (20 June 2012). Retrieved on 30 July 2013.
Alexander, Steven. (20 June 2012) The Bug Charmer: How long should passwords be? Archived 20 September 2012 at the Wayback Machine. Bugcharmer.blogspot.com. Retrieved on 30 July 2013.
"passlib.hash - Password Hashing Schemes" Archived 21 July 2013 at the Wayback Machine.
Florencio, Dinei; Herley, Cormac; van Oorschot, Paul C. "An Administrator's Guide to Internet Password Research" (PDF). Microsoft Research. Archived from the original (PDF) on 14 February 2015. Retrieved 27 May 2026.
Cracking Story – How I Cracked Over 122 Million SHA1 and MD5 Hashed Passwords « Thireus' Bl0g Archived 30 August 2012 at the Wayback Machine. Blog.thireus.com (29 August 2012). Retrieved on 30 July 2013.
Password Protection for Modern Operating Systems Archived 11 March 2016 at the Wayback Machine (pdf). Usenix.org. Retrieved on 20 May 2012.
How to prevent Windows from storing a LAN manager hash of your password in Active Directory and local SAM databases Archived 9 May 2006 at the Wayback Machine. support.microsoft.com (3 December 2007). Retrieved on 20 May 2012.
"Why You Should Lie When Setting Up Password Security Questions". Techlicious. 8 March 2013. Archived from the original on 23 October 2013. Retrieved 16 October 2013.
Joseph Steinberg (12 November 2014). "Forbes: Why You Should Ignore Everything You Have Been Told About Choosing Passwords". Forbes. Archived from the original on 12 November 2014. Retrieved 12 November 2014.
"The problems with forcing regular password expiry". IA Matters. CESG: the Information Security Arm of GCHQ. 15 April 2016. Archived from the original on 17 August 2016. Retrieved 5 August 2016.
Schneier on Security discussion on changing passwords Archived 30 December 2010 at the Wayback Machine. Schneier.com. Retrieved on 20 May 2012.
Seltzer, Larry. (9 February 2010) "American Express: Strong Credit, Weak Passwords" Archived 12 July 2017 at the Wayback Machine. Pcmag.com. Retrieved on 20 May 2012.
"You must provide a password between 1 and 8 characters in length". Jira.codehaus.org. Retrieved on 20 May 2012. Archived 21 May 2015 at the Wayback Machine
"To Capitalize or Not to Capitalize?" Archived 17 February 2009 at the Wayback Machine. World.std.com. Retrieved on 20 May 2012.
Thomas, Keir (10 February 2011). "Password Reuse Is All Too Common, Research Shows". PC World. Archived from the original on 12 August 2014. Retrieved 10 August 2014.
Pauli, Darren (16 July 2014). "Microsoft: You NEED bad passwords and should re-use them a lot". The Register. Archived from the original on 12 August 2014. Retrieved 10 August 2014.
Bruce Schneier : Crypto-Gram Newsletter Archived 15 November 2011 at the Wayback Machine 15 May 2001
"The Strong Password Dilemma" Archived 18 July 2010 at the Wayback Machine by Richard E. Smith: "we can summarize classical password selection rules as follows: The password must be impossible to remember and never written down."
Bob Jenkins (11 January 2013). "Choosing Random Passwords". Archived from the original on 18 September 2010.
"The Memorability and Security of Passwords – Some Empirical Results" Archived 19 February 2011 at the Wayback Machine (pdf)
"your password ... in a secure place, such as the back of your wallet or purse."
"Should I write down my passphrase?" Archived 17 February 2009 at the Wayback Machine. World.std.com. Retrieved on 20 May 2012.
Howley, Dan (17 June 2016). "There's a quick and easy way to be more secure online". Yahoo Tech. Archived from the original on 17 October 2025. Retrieved 28 May 2026.
Kristen Ranta-Haikal Wilson (9 March 2020). "The Debate Around Password Rotation Policies". SANS Institute. Archived from the original on 17 October 2025. Retrieved 31 October 2022.
AlFayyadh, Bander; Thorsheim, Per; Jøsang, Audun; Klevjer, Henning. "Improving Usability of Password Management with Standardized Password Policies" (PDF). Archived (PDF) from the original on 20 June 2013. Retrieved 12 October 2012.
Tung, Liam (9 August 2017). "Hate silly password rules? So does the guy who created them". ZDNet. Archived from the original on 29 March 2018.
McMillan, Robert (7 August 2017). "The Man Who Wrote Those Password Rules Has a New Tip: N3v$r M1^d!". The Wall Street Journal. Archived from the original on 9 August 2017.
Roberts, Jeff John (11 May 2017). "Experts Say We Can Finally Ditch Those Stupid Password Rules". Fortune. Archived from the original on 28 June 2018.
Wisniewski, Chester (18 August 2016). "NIST's new password rules – what you need to know". Naked Security. Archived from the original on 28 June 2018.
"Password". Columbia University Computer Science. Archived from the original on 23 April 2007. Retrieved 30 May 2026.
Schneier, Bruce (14 December 2006). "MySpace Passwords Aren't So Dumb". Wired. Archived from the original on 20 August 2019. Retrieved 30 May 2026.
"CERT IN-98.03". 16 July 1998. Archived from the original on 16 October 2009. Retrieved 9 September 2009.
Urbina, Ian; Davis, Leslye (23 November 2014). "The Secret Life of Passwords". The New York Times. Archived from the original on 28 November 2014.
"Consumer Password Worst Practices (pdf)" (PDF). Archived (PDF) from the original on 28 July 2011.
"NATO site hacked". The Register. 24 June 2011. Archived from the original on 29 June 2011. Retrieved 24 July 2011.
Biddle, Sam (11 July 2011). "Anonymous Leaks 90,000 Military Email Accounts in Latest Antisec Attack". Gizmodo. Archived from the original on 14 July 2017.
"Military Password Analysis". 12 July 2011. Archived from the original on 15 July 2011.
"The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes" (PDF). IEEE. 15 May 2012. Archived from the original (PDF) on 19 March 2015. Retrieved 11 March 2015.
"Gates predicts death of the password". CNET. 25 February 2004. Archived from the original on 2 April 2015. Retrieved 14 March 2015.
Wael (18 September 2005). "Using AJAX for Image Passwords - AJAX Security Part 1 of 3". Wael Chatila. Archived from the original on 16 June 2006. Retrieved 27 May 2026.
Butler, Rick A. (1 September 2004). "Face in the Crowd". Microsoft Certified Professional Magazine Online. Archived from the original on 27 June 2006. Retrieved 27 May 2026.
"What is graphical password? - Definition from Whatis.com - see also: GUA, graphical user authentication". searchsecurity.techtarget.com. 4 June 2007. Archived from the original on 19 February 2011. Retrieved 27 May 2026.
Ericka Chickowski (3 November 2010). "Images Could Change the Authentication Picture". Dark Reading. Archived from the original on 10 November 2010.
"Confident Technologies Delivers Image-Based, Multifactor Authentication to Strengthen Passwords on Public-Facing Websites". marketwire. 28 October 2010. Archived from the original on 7 November 2010.
"User Manual for 2-Dimensional Key (2D Key) Input Method and System" (PDF). xpreeli.com. 8 September 2008. Archived from the original (PDF) on 18 July 2011. Retrieved 27 May 2026.
"IBM Reveals Five Innovations That Will Change Our Lives within Five Years". IBM. 19 December 2011. Archived from the original on 17 March 2015. Retrieved 14 March 2015.
"Google security exec: 'Passwords are dead'". CNET. 25 February 2004. Archived from the original on 2 April 2015. Retrieved 14 March 2015.
"Authentciation at Scale". IEEE. 25 January 2013. Archived from the original on 2 April 2015. Retrieved 12 March 2015.
Mims, Christopher (14 July 2014). "The Password Is Finally Dying. Here's Mine". The Wall Street Journal. Archived from the original on 13 March 2015. Retrieved 14 March 2015.
"NSTIC head Jeremy Grant wants to kill passwords". FedScoop. 14 September 2014. Archived from the original on 18 March 2015. Retrieved 14 March 2015.
"Specifications Overview". FIDO Alliance. 25 February 2014. Archived from the original on 15 March 2015. Retrieved 15 March 2015.

wired.com (Global: 254^th place; English: 178^th place)

McMillan, Robert (27 January 2012). "The World's First Computer Password? It Was Useless Too". Wired magazine. Retrieved 22 March 2019.
Schneier, Bruce (14 December 2006). "MySpace Passwords Aren't So Dumb". Wired. Archived from the original on 20 August 2019. Retrieved 30 May 2026.

worldcat.org (Global: 4^th place; English: 4^th place)

search.worldcat.org

Ranjan, Pratik; Om, Hari (6 May 2016). "An Efficient Remote User Password Authentication Scheme based on Rabin's Cryptosystem". Wireless Personal Communications. 90 (1): 217–244. doi:10.1007/s11277-016-3342-5. ISSN 0929-6212. S2CID 21912076.

wsj.com (Global: 94^th place; English: 66^th place)

McMillan, Robert (7 August 2017). "The Man Who Wrote Those Password Rules Has a New Tip: N3v$r M1^d!". The Wall Street Journal. Archived from the original on 9 August 2017.
Mims, Christopher (14 July 2014). "The Password Is Finally Dying. Here's Mine". The Wall Street Journal. Archived from the original on 13 March 2015. Retrieved 14 March 2015.

xpreeli.com (Global: low place; English: low place)

"User Manual for 2-Dimensional Key (2D Key) Input Method and System" (PDF). xpreeli.com. 8 September 2008. Archived from the original (PDF) on 18 July 2011. Retrieved 27 May 2026.

yahoo.com (Global: 431^st place; English: 257^th place)

Howley, Dan (17 June 2016). "There's a quick and easy way to be more secure online". Yahoo Tech. Archived from the original on 17 October 2025. Retrieved 28 May 2026.

zdnet.com (Global: 1,235^th place; English: 855^th place)

Tung, Liam (9 August 2017). "Hate silly password rules? So does the guy who created them". ZDNet. Archived from the original on 29 March 2018.
Kotadia, Munir (25 February 2004). "Gates predicts death of the password". ZDNet. Retrieved 8 May 2019.

Password (English Wikipedia)

about.com (Global: 419th place; English: 335th place)

ancienthistory.about.com

acm.org (Global: 1,200th place; English: 821st place)

dl.acm.org

adsabs.harvard.edu (Global: 14th place; English: 9th place)

ui.adsabs.harvard.edu

arstechnica.com (Global: 473rd place; English: 338th place)

bbc.co.uk (Global: 11th place; English: 10th place)

news.bbc.co.uk

books.google.com (Global: 3rd place; English: 3rd place)

broadcom.com (Global: low place; English: low place)

community.broadcom.com

bugcharmer.blogspot.com (Global: low place; English: low place)

burtleburtle.net (Global: low place; English: low place)

businesstoday.in (Global: 2,918th place; English: 1,469th place)

cam.ac.uk (Global: 569th place; English: 354th place)

cl.cam.ac.uk

cert.org (Global: low place; English: low place)

cesg.gov.uk (Global: low place; English: low place)

cnet.com (Global: 447th place; English: 345th place)

news.cnet.com

cnet.com

codehaus.org (Global: low place; English: low place)

jira.codehaus.org

columbia.edu (Global: 554th place; English: 368th place)

cs.columbia.edu

computer.org (Global: 6,549th place; English: 4,616th place)

cryptosmith.com (Global: low place; English: low place)

darkreading.com (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

educatecomputer.com (Global: low place; English: low place)

espacenet.com (Global: 950th place; English: 813th place)

worldwide.espacenet.com

fedscoop.com (Global: low place; English: low place)

fidoalliance.org (Global: low place; English: low place)

forbes.com (Global: 71st place; English: 54th place)

fortune.com (Global: 647th place; English: 421st place)

gizmodo.com (Global: 763rd place; English: 486th place)

iacr.org (Global: 6,361st place; English: 4,159th place)

eprint.iacr.org

ibm.com (Global: 1,369th place; English: 968th place)

www-03.ibm.com

imperva.com (Global: low place; English: low place)

imperva.com

blog.imperva.com

infosecurity-magazine.com (Global: low place; English: low place)

itpro.com (Global: low place; English: low place)

kiplinger.com (Global: low place; English: low place)

lyquix.com (Global: low place; English: low place)

macworld.com (Global: 3,602nd place; English: 2,320th place)

marketwire.com (Global: low place; English: 8,211th place)

mcpmag.com (Global: low place; English: low place)

microsoft.com (Global: 263rd place; English: 259th place)

research.microsoft.com

support.microsoft.com

mit.edu (Global: 476th place; English: 340th place)

people.csail.mit.edu

modernlifeisrubbish.co.uk (Global: low place; English: low place)

ncl.ac.uk (Global: 5,403rd place; English: 3,489th place)

homepages.cs.ncl.ac.uk

nist.gov (Global: 708th place; English: 742nd place)

csrc.nist.gov

nvlpubs.nist.gov

nytimes.com (Global: 7th place; English: 7th place)

ofcom.org.uk (Global: 5,969th place; English: 3,088th place)

patents.google.com (Global: 1,154th place; English: 606th place)

pcmag.com (Global: 1,442nd place; English: 915th place)

pcworld.com (Global: 1,889th place; English: 1,323rd place)

psu.edu (Global: 299th place; English: 159th place)

citeseerx.ist.psu.edu

pythonhosted.org (Global: low place; English: low place)

sans.org (Global: low place; English: low place)

schneier.com (Global: low place; English: low place)

securitybrief.co.nz (Global: low place; English: low place)

semanticscholar.org (Global: 15th place; English: 8th place)

api.semanticscholar.org

sleuthsayers.org (Global: low place; English: low place)

sophos.com (Global: low place; English: low place)

nakedsecurity.sophos.com

about.com (Global: 419^th place; English: 335^th place)

acm.org (Global: 1,200^th place; English: 821^st place)

adsabs.harvard.edu (Global: 14^th place; English: 9^th place)

arstechnica.com (Global: 473^rd place; English: 338^th place)

bbc.co.uk (Global: 11^th place; English: 10^th place)

books.google.com (Global: 3^rd place; English: 3^rd place)

businesstoday.in (Global: 2,918^th place; English: 1,469^th place)

cam.ac.uk (Global: 569^th place; English: 354^th place)

cnet.com (Global: 447^th place; English: 345^th place)

columbia.edu (Global: 554^th place; English: 368^th place)

computer.org (Global: 6,549^th place; English: 4,616^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

espacenet.com (Global: 950^th place; English: 813^th place)

forbes.com (Global: 71^st place; English: 54^th place)

fortune.com (Global: 647^th place; English: 421^st place)

gizmodo.com (Global: 763^rd place; English: 486^th place)

iacr.org (Global: 6,361^st place; English: 4,159^th place)

ibm.com (Global: 1,369^th place; English: 968^th place)

macworld.com (Global: 3,602^nd place; English: 2,320^th place)

marketwire.com (Global: low place; English: 8,211^th place)

microsoft.com (Global: 263^rd place; English: 259^th place)

mit.edu (Global: 476^th place; English: 340^th place)

ncl.ac.uk (Global: 5,403^rd place; English: 3,489^th place)

nist.gov (Global: 708^th place; English: 742^nd place)

nytimes.com (Global: 7^th place; English: 7^th place)

ofcom.org.uk (Global: 5,969^th place; English: 3,088^th place)

patents.google.com (Global: 1,154^th place; English: 606^th place)

pcmag.com (Global: 1,442^nd place; English: 915^th place)

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

psu.edu (Global: 299^th place; English: 159^th place)

semanticscholar.org (Global: 15^th place; English: 8^th place)

springer.com (Global: 182^nd place; English: 172^nd place)

techradar.com (Global: 1,513^th place; English: 964^th place)

techtarget.com (Global: 3,908^th place; English: 3,051^st place)

theguardian.com (Global: 16^th place; English: 11^th place)

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

time.com (Global: 84^th place; English: 63^rd place)

uio.no (Global: 2,380^th place; English: 2,625^th place)

usenix.org (Global: 7,359^th place; English: 4,657^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wired.com (Global: 254^th place; English: 178^th place)

worldcat.org (Global: 4^th place; English: 4^th place)

wsj.com (Global: 94^th place; English: 66^th place)

yahoo.com (Global: 431^st place; English: 257^th place)

zdnet.com (Global: 1,235^th place; English: 855^th place)