> I haven't seen anyone implement it in the wild, but it'd also be cool if there was a wordlist of the 25 most common passwords that the site matched against an

> I haven't seen anyone implement it in the wild, but it'd also be cool if there was a wordlist of the 25 most common passwords that the site matched against and refused to accept. I have implemented that on a site. It wouldn't accept the top 10,000 most common passwords. (or was it 1k). Otherwise ~1% of your users will pick "password" as a password.