>PS, Ken I used "aaaaa" to mean a 5-char all-lower password, not > that 50% of our users literally used 5 a's! I had no idea the > actual password, I just logged "a" "A" "#" or "." for a char > in that 'class'. Ah, that makes more sense. I knew it was bad out there, but my misinterpretation of your stats surprised me. My bad! --Ken