"These days, security advisors talk a lot about Best Practices: establishes procedures that are generally held to yield good results. Deploy Best Practices in your organization, the advisors say, and your security will improve. That's true, as far as it goes, but often we can make more progress by working to eliminate Worst Practices.
"A Worst Practice is something that most of us do, even though we know it's a bad idea. One current Worst Practice is the way we use passwords to authenticate ourselves to web sites."
