A password not in a common password list should probably be another imo.