There was a time when random passwords seemed like a bad thing, because users would write them down, and that was an obvious risk. We are way past that of cours

There was a time when random passwords seemed like a bad thing, because users would write them down, and that was an obvious risk. We are way past that of course, but that line of thinking is still informing security decisions.