[catweasel]

One option might be to not ask for a password at all and auto generate it. Most sign ups include some form of confirmation email, perhaps a password could be sent with it? Not appropriate for every app but registration with nothing more than email address is getting as stripped down as possible.