even so, inquiring users to recollect a password consisting of the "mix of uppercase and lowercase people" is analogous to asking them to recollect a sequence of bits: tricky to remember, and only a bit more challenging to crack (e.g. only 128 periods more durable to crack for 7-letter passwords, significantly less If your user just capitalises one