A NIST proposal says requiring users to come up with highly complex passwords creates the possibility that users will write down the passwords in an unsafe manner ...