ABSTRACT. Personal data of users is subject to damage, viruses, natural disasters, theft. Digital thieves are constantly looking for vulnerabilities that will allow them to steal valuable data. Attempts to steal information have different purposes: some scammers get money from bank accounts or credit cards, and others can sell information to a third party. The password is the simplest and cheapest way to authenticate. Restrictive password policies can cause some user actions, such as writing passwords, reusing them for different accounts, or sharing passwords with friends, can compromise security. The password security policy should balance directly between security and ease of use. The article proposes the worked out recommendations for the balance of security and user convenience.