Currently businesses and government create their own password requirements. Lack of standardization is a problem because people do not want have to maintain a password for every business or government they have to deal with. People only have one social security number, do they really need a unique password for every electronic transaction? The following is an idea that a person can decide what level of protection they may need, along with the vendor.
Electronic passwords should fall into three categories:
Normal: 8 alphanumeric characters.
Safe: 8 alphanumeric characters with at least one number and and at least one uppercase letter
Secure: 8 alphanumeric characters with one number, at least one number, and at least one uppercase letter, and at least one symbol