A middle ground would be to generate password suggestions, but give the user the option to change his/her own password. I used a method a few years ago to gene

A middle ground would be to generate password suggestions, but give the user the option to change his/her own password. I used a method a few years ago to generate passwords for users on an intranet. They were free to replace them, but a poll showed that most users went with the suggested password. I focused on generating passwords that users could pronounce (and therefore remember), like gekava86, lofesu75, 23wopeni, etc. At the time, I didn't use BCrypt so they were a bit weak (though certainly stronger than whatever the users' regular password was). If you use BCrypt, you don't have to worry as much about the password being "strong", the focus comes back to it being unique.