HIPAA Security - Passwords

The ideal password is something like this:

682Tj0327Jr486

Numbers, letters, upper case, lower case - good strong security.

But there is a problem.

Try memorizing the password. Try to remember it for a day. You probably cannot.

If you require your employees to have complex passwords they will write the password somewhere, probably on a sicky note, and put it where they can find it.

If the employee can find the written password, so can someone else.

A six digit password with both letters and numbers may be a better alternative (the number prevents the use of cat names, kid names, etc.).