Learn About creating good password security.

An IT Security consultant has made three primary recommendations regarding passwords:

1. Prohibit guessable passwords such as common names, real words, numbers only require special characters and a mix of caps, lower case, and numbers in passwords

2. Reauthenticate before changing passwords user must enter old pw before creating a new one

3. Make authenticators unforgeable, do not allow email or user ID as password

Write a brief paper of 300 words along with in-text citations explaining each of these security recommendations.  Do you agree or disagree with these recommendations? Would you change, add or delete any of these?  Add additional criteria as you see necessary.