They not only force you to change the p/w every 90 days... They don't allow you to reuse passwords you ever used before, you have to use upper AND lower case letters AND digits, make it at least 8 characters, with no more then two consecutive identical characters - so secure that even you could not remember it yourself... And after that they email you this piece of art you just created, along with your login ID - as an open, unencrypted text!