It is highly suggested in msdn, after all we are deling with passwords...