[vitamen]

Is this effective at stopping attacks (given that it is public knowledge), or is it mostly a measure to annoy users into updating their passwords to something less cumbersome?

[Cerium]

I think this is to annoy the users.