in reply to Managing Passwords (OT)

"...is it enough...?" Well, you can't answer that until you decide what the security issues are. What do you want to protect against? What are you not worried about (or not your responsibility)?