Any site which requires a personal account and the creation of a password (passcode) to login to that account should be required by law to have a minimum format.
This format shall include as a MINIMUM:
1. Passcode length shall be between 10 characters and 64 characters long.
2. The passcode shall allow the use of allphanumeric, numeric, and special characters.
3. The passcode shall treat upper and lower case characters as different characters.
4. The passcode shall be protected with cryptographic hash and salt functions and shall NEVER be stored in plain text.
5. The login shall include a link to the passcode format required in the login field.
6. The login shall include a link to a "good password use" page.
7. A passcode strength meter will be part of the login field.