And unless there is a minimum password age some people will just change it 20 times and then back to the same password.