Tips for protection

Create a good initial password for users. If users are able to change their assigned password, enforce a policy of requiring good passwords.