Last time I saw a password prompt it said my password must begin with a Capital letter and have a number and special character and be at least 8 characters long. This law probably will not prevent someone from creating a user passkey like [email protected], the device will be hacked later and the consumer will complain about it. Making the company pay for their ineptness, it is after all California, where people sue over nothing. This might be a good thing for places that have vaults in their hotels. Lockpickinglawyer on youtube showed an example of how to unlock a hotel room vault by using the factory default code. link text