In reply to Richard.

The coming 4.3 release puts some focus on passwords - https://make.wordpress.org/core/2015/05/11/the-plan-for-passwords/