Here are some of the best practices for IT admins and security teams to make sure end-user passwords are not compromised