Everything you’ve been told about passwords is a lie

washingtonpost.com