Regarding Blizzard passwords: an old acquaintance generated his own SHA-1 hashes for his Battle.net account - which did not resolve to characters which could be input by a regular client - so nobody else would be able to login to his account even if they had the information. Pretty neat.