I should receive feedback about the quality of my password when I sign up
Summary: As many systems do, we should probably provide a visual indication of how "good" the password is.
I suspect we should forbid passwords that are truly terrible, and provide feedback about ones that are mediocre.