Our passwords are dumb

I’ve thought for a while that the way we enforce ‘strong’ passwords was dumb and actually made them easier to crack, not harder.

xkcd sums it up in a way that I’ve never quite been able to:

The conclusion says it all.