Apparently many designers and developers believe secure passwords have to look complicated, even these days. The most secure ones seem to be „ #sK8/a_C%eD8)“. This looks like hell and is a mess to create. How would you explain your user, the password has to have a length of at least 8 characters, 2 characters have to be uppercase, 2 have to be special characters and of course numbers are a must?

Would you like to create such a password? I wouldn’t. Instead I would probably risk it to write down this password on a note or use the same password several times. Maybe I would use a password manager. Nothing is a really great idea. Such complex requirements for passwords are a huge problem for privacy and IT security.

But we need these passwords! At least this is, what passwordsgenerater.net wants to tell us. NO! We don’t need overly complicated passwords. This claim is idiocy. I don’t have …show more content…
So, why should you as a designer be interested in password security as the developers will give us the rules for passwords most times?
Complex passwords are hard to remember and a mess to create. This is an obstacle we don’t need to confront the user with. So, why should we? Creating an account is never something the user really likes. Therefore we shouldn’t call for more than we need.
If the user created an account despite of complex rules the next challenge starts: Entering the right password. You don’t see what you type, at least usually, so it’s pretty likely, you fail, if you also have to think about special characters, numbers and whatever. Hence probably the most often pressed button on each website is the „I forgot my password“ button. This produces real costs: It at least requires sending an email, which equals costs.
Maybe the users even will need help by your support to recover the password. As a result of this, the general service will become worse because the support has to deal with such obvious tasks even more or it will become more