It doesn't need to be perfect, it only needs to be better than what it is today (predictable passwords)