In reply to Wil.

But Wil, the point, as per the XKCD cartoon, is that better passwords can be easy to remember "correcthorsebatterystaple" are in fact much better than short randomised strings. No need for the compromise if we are educated about the concept of entropy. In the critical situations you describe I would suggest moving to 2 factor authentication.

Sarah, choosing to use a weak password isn't necessarily about leaving the door unlocked, it is very useful for test environments which are on restricted networks. And to be honest, if a hacker gains access to our network the last thing we'd be worried about is them accessing a development instance of WordPress!