noting that passwords should be sufficiently different for increased
security