>PS, Ken I used "aaaaa" to mean a 5-char all-lower password, not[color=blue]
> that 50% of our users literally used 5 a's! I had no idea the
> actual password, I just logged "a" "A" "#" or "." for a char
> in that 'class'.[/color]
Ah, that makes more sense. I knew it was bad out there, but my
misinterpretation of your stats surprised me. My bad!