Security

It worries me that on so many occasions when I've been faced with a password protected client file I can make a few guesses and figure out the password.  At least a little creative personalization would be a nice sign.  I'm talking admin and password working most of the time, or the password is the same as the user name or the first name is the user name and the last name is the password.  All too easy (bonus: Mortal Kombat reference).