dbarron I don't know where and when you did this or how small the company was to be so ignorant and tolerate this but clearly this was wrong and nowadays should you do something like this, not only you'd be fired for serious misconduct but most large companies would also sue you.
Massive password cracking not only is legally questionable, but it doesn't improve security: it is a security incident ! Also sending mails to ask people to use stronger password doesn't correct anything. And since internal sources represent a higher risk than hackers for companies, mailing everyone to tell "passwords here are weak" is like telling employees "never considered stealing company sensitive data? you should try, you have no idea how easy it is to hack your colleagues and gain their accesses".
Because you know just enforcing a password policy isn't fun... Cracking and mailing people is funnier, especially when lot of people would just ignore the mail. 🤠
