default passwords ?
weak passwords ?
password creation process ?
initial password communication ?
password change process ?
forgot password process ?


compelxity =
pwd sent to email on recovery =
blacklist =
predictable username =
length =
expiry =
history =
default password =
use of initial pwd =
based on un =
lockout =
multifactor =