This advice might appear to go against my simultaneous support of NIST Special Publication 800-63 Digital Identity Guides. NIST SP 800-63 recommends using non-password methods where possible, and ...