Do some research on passwords, in particular read Bruce Schneier's stance on passwords.