A weak password may be a security risk