Must not be the same as their original password (or we cannot be sure it's working properly)