US state takes a stance against weak passwords.