When a password is generated by the application, it seems quite secure. However, when people change their passwords, they usually don't make them as secure as they should be. Is there a way to reject a new password if it isn't secure? Or provide a "meter" that shows just how secure their new password really is so that they can reevaluate their choice? I know of some Javascript coding for this purpose (http://javascript.internet.com/passwords ), but I'm not sure if it's possible to use any of it in a CMS environment like yours.

Thank you for your attention!

scottishlass
"You can't! It's impossible! I'm far too busy, so ask me now before I can become sane." - Edna "E" Mode