Password 'generating' and password 'checking' webservices should be outlawed. They're a ridiculously easy way to build a rainbow table from unsuspecting users.