User's actual password is of very limited use to enforcement officials. Just provide the short "login history" to the user at each login and they'll have a chance to notice strange accesses of their account.
That was my thought as well. I doubt the simply want to be able to log onto your forum or mail account since they can get everything they want via a simple warrant. However imagine you find a USB drive with an encrypted file on it. Now all you have to do is get all the suspects passwords from all the sites he has accounts on and try those passwords with some variants and chances are one will decrypt the file.
reply