Normal people just *don't understand* passwords.
I used to do dial-up Internet tech support. "What do you want for a password?" "Oh, [username]." "I'm sorry, you can't have it be the same." "Oh, [username]1."
Suggestions? Assume we can't require an RSA keyfob for all editors.
- d.