There is no reason to make a password unique...use a unique username...that is what is done and there are many reasons why it works and is the best method.

The bottom line is this: You can show a message that says "That username is already used." You can't show a message that says "That password is already used."

If you are worried about someone guessing a password, you can require two passwords. So, you would have to enter username, p/w1, p/w2 when logging-in.

Joe


>I understand the ease of guessing out passwords. User names are guessed in a flash. So with what you say, the conclusion must be that two fields are not so secure anyway. Maybe a control on the uniqueness of the Password field in either case should be mandatory.
>John Harriss