Striking the Perfect Balance: How to Design a Strong Password Policy That's User-Friendly & Effective