Saving the absolute worst for last on the UMD security training, on passwords/phrases:
* Substitute 3 for E and R for "are"
* Never write down your passphrase, never store it in your browser
* Use a familiar phrase, perhaps a line from your favorite song.

What are we even doing here?

@mmazurek as a consultant, I have the pleasure of consuming loads of "security awareness" trainings.

I am only amazed at how consistently awful they are. I have yet to see one that wasn't utter garbage.