Attempting to scare people by telling them their password choices are stupid or easily guessable is counterproductive: because it serves only to reassure them that they are just like everyone else.
By saying users are stupid, you perpetuate a stereotype that people are the problem, according to Dr Jessica Barker.
Read more