Require that the password is sufficiently complicated. For example, numbers/uppercase/lowercase at the minimum.