> password.  This may sound overfully political correct, but if you
> want to avoid a 'comic opera' fight down the road, better look at
> what strings and/or phrases, the algorithm hands out.
 
When I worked at a university, what we did was to not allow vowels and
required every other position to be of a different type than the
previous.  This means if the first position is numeric, the second is
alpha and vice-a-versa (and as Gavin pointed out, don't use "1", "l" or
"0"; you shouldn't have "O" if you don't use vowels).
 
This didn't solve all the problems, since users typically like to make
words from their passwords so it is easier to remember.
 
--------------------------------------------------
Larry Boyd    <[log in to unmask]>