To have account-level safety, allow strong, book passwords boost them regularly