A user received an account compromise notice from an online retailer. Two weeks later, the user received
another notice stating the new compromise used the credentials from the first compromise. Which of the
following password best practices MOST likely would have prevented the second compromise?


A. Password age
B. Password complexity
C. Password reuse
D. Password length