This is a great example of how impossible it is not write down usernmes and passwords and how infeasible forcing changes is.

The other thing people do not talk about enough is user names. They should be somewhat random too and not reused. Forcing people to use their email address is particularly stupid but very common.