function new_pass_form()
{
    pagetop(gTxt('tab_site_admin'), '');

    echo form(
        hed(gTxt('change_password'), 2).
        inputLabel(
            'new_pass',
            fInput('password', 'new_pass', '', 'txp-maskable', '', '', INPUT_REGULAR, '', 'new_pass'),
            'new_password', '', array('class' => 'txp-form-field edit-admin-new-password')
        ).
        graf(
            checkbox('unmask', 1, false, 0, 'show_password').
            n.tag(gTxt('show_password'), 'label', array('for' => 'show_password')), array('class' => 'edit-admin-show-password')).
        graf(fInput('submit', 'change_pass', gTxt('submit'), 'publish')).
        eInput('admin').
        sInput('change_pass'),
    '', '', 'post', 'txp-edit', '', 'change_password');
}
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.