avoid 3 passwords being marked as "medium" strength