You can setup password expiration on your servers, just to be safe, the only problem with it is that people will start to forget their passwords if the expiry time is too short and they have to change them a lot - I have seen a few sites with a password strength meter on them which is quite a nice effect, I might have to look into this for a few of my websites, just incase.
|