Many sers tend to use easy to guess passwords and troublemakers are breaking into existing accounts to Spam, or create trouble...
I can force new users to pick longer password but how can we protect the existing accounts?
We could send a message to all users asking them to change the password... but would prefer another option to deal with this problem
