I would have thought it was actively detrimental to ask people to come up with a new one every month. I can just imagine villainous hacker sitting there thinkin

I would have thought it was actively detrimental to ask people to come up with a new one every month. I can just imagine villainous hacker sitting there thinking "Blast, none of the employee's passwords were in my database of common passwords. Never mind, next month they'll have to have a whole new set and maybe one of those will be."