Computer scientists found that email notifications to update passwords potentially yielded diminishing returns after three messages. They also found that a prompt to update passwords while users were ...