* It's the easiest to code * The probability of your servers getting hacked/stolen is reasonably low as long as you take other precautions. For most people, I

* It's the easiest to code * The probability of your servers getting hacked/stolen is reasonably low as long as you take other precautions. For most people, I'd say it's a lot of extra work, for no real pay-off - apart from making your users feel a bit more warm and fuzzy. A better solution would probably just be a disclaimer on websites saying "Please don't use the same password you use for online banking here, as that would be silly".