CUNYfirstās password policy is intended to compel system users to choose secure passwords, but I would contend that the systemās policy actually has the opposite effect. As Gene Spufford, at the Center for Education and Research in Information Assurance and Security (CERIAS) and othersāhave argued, passwords donāt work that way.
