Preventing easily guessed passwords

Passwords containing the user name and the words secret and password, pass and word will be not be accepted as valid passwords. For example, if the user name were Fred, a password of 123Fred123 would be rejected as it contains the user name. This check will only be performed on newly entered passwords. Passwords converted from prior versions will not be subject to this restriction.