I used to work in IT, when someone forgot their password, we would reset it to password or 123456 so it was easy to remember and then they can change it. Problem is not everyone changes their password, esp on administrative accounts and root.