In 2003, IT expert Bill Burr suggested that passwords should be complex, changed regularly and include a broad range of characters. Almost 15 years later, Burr revised his stance due to the difficultly of remembering passwords and the pain it causes users. Burr suggested to The Wall Street Journal that these recommendations might have done more harm than good. The new NIST guidelines recommended the use of long, easy-to-remember phrases instead of words with special characters. These longer phrases are much harder to crack.”]