Hook_form_FORM_ID_alter problems with custom validating
I think you need to write

    if (in_array($form_state['values']['pass'], $badpasswords)) {
        form_set_error('pass', t('Please use a more secure password!'));
    }


$form_state['values']['pass'] instead of $form['values']['pass']