if backward compatibility with microsoft lan manager is not needed, in versions of windows nt (including windows 2000, windows xp and later), a passphrase can be used as a substitute for a windows password. if the passphrase is longer than 14 characters, this will also avoid the generation of a "very" weak lm hash.