Comment by tedunangst

Make your security policy difficult enough to comply with, and people will find workarounds like pasting their passwords into strangers' websites.