Users like to use similar and too simple passwords. You can determine the minimum available password complexity
and prohibit the use of the same password more than once.