Your security team might benefit from a review of password best practice recommendations from CERT or NCSC.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?