by designing passwords or checking the strength of passwords