In reply to Ryan Hellyer.

Yes, I agree. Microsoft did this before when they sent out emails to users who have weak passwords, but it can only catch those common weak passwords. I was curious as well to know how WPML did it since some users said their passwords were actually strong passwords.