The sysadmin in the CS computer labs at my uni (Leeds) was doing this in 2002. Changing cracked passwords was compulsory, you got an email that just said (para

The sysadmin in the CS computer labs at my uni (Leeds) was doing this in 2002. Changing cracked passwords was compulsory, you got an email that just said (paraphrasing) "Your password is crap" and then were forced to change it at next login. It was quite amusing, and instructive for the first year students. I seem to remember it happening to maybe 15 to 20% of people when I started, even though everyone was warned repeatedly. And this was with hardware and hashes from 15 years ago. Many (most?!) websites were still storing passwords in plain-text and didn't use TLS for log-in forms in those days!