If the password is leaked, it will be out in one shot, so it is required to automatically generate and update a random character string on a regular basis. However ...