You Might Not Need Complex, Alphanumeric Passwords After All Posted by August 10, 2017 Leave a comment on You Might Not Need Complex, Alphanumeric Passwords After All NIST now recommends using long passphrases instead of complicated alphanumeric passwords, and only refreshing them if they’ve been breached.