Average person has 19 passwords
More than 1 in 3 (35%) of those questioned said they struggle to
remember strong passwords, which is unsurprising given that the
average Briton now has 19 of them to remember.
Imagine how many passwords the user needs to remember! Asking your user to have 5 requirements
- Uppercase Letter
- Lowercase Letter
- Special Character
increases the safety, but also increases the complexity. So 20% of dropouts seems logical.
Option 1 Decreasing the requirements is a logical option, as long as it does not make the system less safe.
Option 2 Sending an email to you users when they try to log in after x number of tries, and asking them to reset their password is a nice option as well. The drawback is that they will still need to create a complex password.
Thinking out loud What about reminding them that they password meets the following requirements? If they know what requirements their password meets, maybe they will remember also the password. This is kind of a reverse engineering way for your users.
Therefore, the best option is Option 1. You will need to convince your security that this is the way to go. There must be a way to settle this in the middle because the user should be able to log in easily but security should not be compromised.
This article (https://uxplanet.org/why-complex-passwords-are-bad-design-and-5-ways-to-do-better-affcc4516406) could be of a great help and it provides 5 ways that can help your users get their passwords better.
- Explain why they need secure passwords
- Make it easy to create a password
- Use social login
- Use only email address in your login form
- Remove sign up wall completely