Over the years I've worked in a number of organizations, each position requiring the use age of numerous systems; each one of those with their own password requirements. And yes, employees run their passwords exactly in this manner. Maybe it's the name of their spouse or child, dog or the model of their favorite car, but then it's that plus a 123 . The next month it's the same, but 456 . Then 789 . Now imagine being required to change your password every month, or at the very least, every quarter. After a year or two the passwords are difficult and cumbersome, especially when they can't overlap or use previously used codes. Because of this, people tend to use simple passwords that are easy to remember without keeping a written copy in an easy to locate location. Good on Microsoft for trying to do something, anything, to address lackadaisical password security. Unfortunately, not everyone is a trained cybersecurity expert. http://www.cbc.ca/news/business/microsoft-pa
