Bill Burr, who wrote the 2003 NIST guidelines recommending passwords mix uppercase, numbers, and special characters, later said he regretted it — his reference material was from the 1980s. Experts now say long passphrases of multiple words are both safer and easier to remember.