Bad passwords can have catastrophic consequences. That's because passwords play a key role in enterprise security, protecting assets (including email systems, databases and many other types of servers) from unauthorized users (including malicious hackers). A bad password has one of the following three characteristics: It can easily be guessed It is likely to appear in a wordlist It can be bruteforced in a reasonable amount of time All three of these possibilities need a little further explanation.