Secure passwords

Web security blogger Anil John reports about the results of a study on secure passwords:

# "... security can be significantly improved by educating users to select mnemonic passwords
# Size of the password matters
# Entropy per character matters, so instruct users to choose passwords containing numbers and special characters as well as letters."

An example of a mnemonic password is "I's12n&Iah" which is derived from the phrase "It's 12 noon and I am hungry" .

The regex to handle this:
^.*(?=.{9,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#'$%^&+=]).*$

Comments