Several points:

1. The examples ("a$tari$born") are not that good. When people are asked to include symbols and numbers, the first thing they do is *replace* letters with symbols or numbers. Show several examples, some that replace, some that add, most should do a combination, e.g. "1Staris/born."

2. I'd be stronger in point 5 about what they shouldn't use. They should use any names or derivations of relatives' names, pets, sporting teams, favourite collectable items or anything else a friend or colleague could reasonably be expected to find out without too much trouble.

3. I'd think carefully about including this, but you could suggest people have a password sequence. This means that when you have to change your password, you already have a good idea what to change it to.

Wade.