Many Password Strength Meters Are Downright Weak

I know this may be hard to believe, but researchers say that most password strength meters suck.

Website password strength meters, like a spouse asked to assess your haircut or outfit, often tell you only what you want to hear. That’s the finding from researchers at Concordia University in Montreal, who examined the usefulness of those pesky and ubiquitous red-yellow-green password strength testers on websites run by big names such as Google, Yahoo, Twitter and Microsoft/Skype.