It's a better idea than letting you run your favourite password guesser on the accounts of your choice. Most places I've worked lock the account after 3 failed attempts.

ps. guessing someone's username generally isn't hard.

Have fun,
Carl Forde