Your average user uses "password" or an equally naive variation thereof, with a handful of username/password combinations. Yes. And... that's a well-establishe

Your average user uses "password" or an equally naive variation thereof, with a handful of username/password combinations. Yes. And... that's a well-established workflow, isn't it? ;) It's a degenerate case, so I don't blame you for not catching my drift. But my point stands: Any user who sees a username/password form knows what to do immediately, and does it fairly instinctively. Even if the instinct is to do something much simpler than it is secure.