I've come to the conclusion that there is no way to give have a safe password, no matter what they can run lopht or something else to get it, if they're lucky they can even take the files with them....