Word. Password security should be proportional to chance of a dictionary attack * risk of a successful attack.
Mozilla want a 12 character passwords to file a bug report when they really should publish an email address an anonymous html form and say please.
I know what you are feeling, but there's a balance to making bug filing easy. For a large visible project, make it easy and the statistical noise drowns everything out.
