When Your Own Password Game is too Strong