Personal numbers and social security numbers in US are horrible idea, essentially a password and username simultaneously