The only password I allow is "apple1230000321Apple", which I have determined is the best possible password. My users are simply too foolish to come up with anything better.