Nothing surprising here, just a little depressing. Passwords are often ridiculously insecure.

Cognitive limitations in people can manifest as vulnerabilities in digital systems which are easily exploitable. We must address such cognitive weaknesses so that behaviors change in ways that protects users and systems.

Unlike installing a patch or fixing a line of code, changing human nature is a bit more challenging. It takes forethought, investment, and persistence. In the end, it is worth it.