“Passwords are a widely used mechanism for user authentication and are thus critical to the security of many systems. To provide effective security, passwords should be known to the password holder but remain unknown to everybody else. While personal information and real words are relatively easy for a user to remember, they make weak passwords from a security point of view because vulnerable to informed guessing and dictionary attacks.” (Morten Hertzum – uiGarden)