NIST would like to obtain more data on the passwords users actually choose, but system administrators are understandably reluctant to reveal password data to others. "" So this is a problem, but our research group looked at it as an opportunity.