Some computer security experts are advancing the heretical thought that passwords might not need to be ?strong,? or changed constantly. They say onerous requirements for passwords have given us a false sense of protection against potential attacks.