on the other hand, asking users to recollect a password consisting of a "mixture of uppercase and lowercase people" is analogous to inquiring them to recall a sequence of bits: hard to keep in mind, and only a little bit tougher to crack (e.g. only 128 periods harder to crack for seven-letter passwords, less In case the user only capitalises one of