[lambeosaurus]

Equally bad: requiring a user to never use the same password twice

Come on, I only forgot my password and want to set it to what I think it should be! I didn't get hacked! Just let me live my life in peace!

[aruggirello]

Worse yet, there are banks that don't let you use any of the last 3-5 passwords. This is really annoying, especially when combined with enforcing a password change every 3 or 6 months. But there is a solution: just use whatever password you have chosen, and add a number for the current quarter or semester. Until they come up with a password strength checker measuring the similarity between your current and previous passwords (eg. levenshtein()), you should be ok.

[stcredzero]

Until they come up with a password strength checker measuring the similarity between your current and previous passwords (eg. levenshtein()), you should be ok.

These have appeared in Ubuntu.