      settings: function (done) {
        var SettingUtil = require('../../../settings/settingsUtil')
        SettingUtil.getSettings(function (err, content) {
          if (err) return done(err)
          var settings = content.data.settings
          passwordComplexityEnabled = settings.accountsPasswordComplexity.value

          return done()
        })
      },
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.