Of Passwords and People: Measuring the Effect of Password-Composition Policies

tl;dr... 16-digit alpha-only is more secure than 8-digit alphanumeric with symbols and no dictionary words. But people still perceive 8-digit complex passwords to be more secure.