In theory, it all depends on the public value of the stuff the password is supposed to protect and the uniqueness of the password. Unfortunately the general po

In theory, it all depends on the public value of the stuff the password is supposed to protect and the uniqueness of the password. Unfortunately the general populace frequently uses the same password for everything so if someone can get the password for their online suduku preferences, there's a chance the same password will work other places. You may not think that matters much, but you're probably doing some fraction of your users a favor by not making things worse for them.