This is a good point, and part of the problem with the way the average computer user (and far too many above-average users) treat their passwords.