Then force unique passwords without requiring the users to remember them, something which is both easier for users and more secure.