yeah, I find that it helps to have a password complexity gauge that shows the user their password is weak, but I still wouldn't stop them from using it ( except for minimum length )