Different websites have different password requirements
- Some are content with a combination of just lower case words
- Some require a combination of lower case and upper case words
- Some require numbers in your password
- Some require special charecters
Now I have a number of different passwords modified to suit the website requirements but I often get mixed up about whether the password was
word@%(some numbers) or just word(some numbers)
and I end up often resetting my password or not even logging in.
Now my question is would be wrong or bad design to display the password guidelines next to the login screen ? I understand it might actually make it unsafe to an extent since it also gives guidelines to someone with malicious intent about how a password might be structured but is this a case where security trumps usability or what is the equitable balance between the two.
Edit: Please note that I am talking about the scenario of password guidelines being displayed when a person is trying to log in (having established an account) and not when he is trying to sign up ( I strongly believe password guidelines are very important then)