> people won't use 20 character passwords because they're too hard to type precisely. I have friends who do this. They set huge passwords for "security", and

> people won't use 20 character passwords because they're too hard to type precisely. I have friends who do this. They set huge passwords for "security", and then can't type them consistently, or forget them, and have to reset the password. Then they complain about their accounts getting locked. I can't convince them that a shorter password is still secure, and will remove much of the aggravation.