Don't underestimate
The full impact of user faced with the sudden ( though inevitable) demand to register for something or other that ought to be straight forward, the mini-panic of trying to think of something and the pressure of knowing you'll need to remember another username and password combination.
Inevitably an awful lot of users, maybe most, choose the buggerit route of using the first memorable thing that comes to mind.
Most passwords are not created with advance planning. But are spur of the moment choices.
And many are for trivial sites, so people are being gently trained to use weak reused passwords
Biting the hand that feeds IT
