I like your suggested solution, particularly as it would be something implementable on the client side.
]]>And those which have to endure security systems which enforce regular unique password changes. /me fumes at National Bank’s business banking
]]>