Also, you point out that "successfully discouraging your users from using a crappy password has much better repercussions." This is true, and I'm curious to know how you personally achieve this with your users, given that the vast majority[1] of users choose spectacularly crap passwords.<p>[1] <a href="http://www.imperva.com/docs/WP_Consumer_Password_Worst_Practices.pdf" rel="nofollow">http://www.imperva.com/docs/WP_Consumer_Password_Worst_Pract...</a>