<i>Employees using the same passwords on Facebook that they use in the workplace bring the possibility of compromising enterprise systems with insecure passwords</i><p>I think we're approaching this the wrong way.  Expecting people to have a large number of passwords is unrealistic, especially if they have accounts they don't log into frequently (e.g. bank accounts).<p>I'm not sure what the right solution is, but constantly telling users to have different passwords isn't going to work.  We need another way to identify people online.