The issue is not the password per se, it is the Draconian Rules for changing the password, not being able to use the last four previous, etc. These are not based on current security best practices. And again, the final result of this is that we have to write the password down somewhere, defeating the whole purpose.
