is that they are not easy to remember creating strong passwords they tend to write those ords down. This weakens the value of the passwor pas y changing it from something they know to something they have which can then be stolen and used by any These problems have led experts to conclude that the attempt to enforce the use strong passwords is counterproductive. The nof major component of help desk costs is associ resetting passwords that users argue for abandoning the que velop and use stro o passwords and to rely on the use of d ual-factor authentication method s, such a a combinat of a smart card and a simple PIN, instead other computer securi experts disagree. note They that operating systems can now accommodate passwords that are longer than 15 characters. This means that Users can create strong, yet easy-to-remember passphrases such as love?gosnorkelinginHawaiidoU?. Such long the effort required to passphrases dramatically increase crack them by brute-force guessing of every combination ht-character password consisting solely of lower- and uppercase letters and numerals has 628 possible combinations. In contrast, a 20-character utilizes only upper alphabetic characters plus numerals has 6220 possible combinations. If passphrases include not only alphanumeric but also special characters, such as and number of possible combinations that must be guessed ethe becomes so large that some secur y experts argue that long passphrases are virtually uncrackable. This means that they do not need to be changed as frequently as passwords. Thus, some computer security experts argue that the ability to use the same passphrase for long period of time, coupled with the fact that it is easier to remember ong passphrase than a strong password, should costs while improving security ramatically cut help desk