- Require stronger initial password when creating user accounts- Train users not to use passwords that are easy to guess