Usability tip. If your website has a password strength requirement/min length, tell the user about it *before* they submit the form!