I had this the other day on the British Gas website. Frankly I'm not that bothered about that account. If somebody wants to login and pay my gas bill I'm quite happy for them to do so.
And why do we persist with pass*words*? Why can't we have arbitrary length passphrases - with spaces in.