Have you thought about linking your Moodle authentication to another system, such as LDAP.
Less confusion with less passwords and password policies from that system will then be applied to your Moodle. We link all systems back to our domain and it was the best thing we ever did.