Reply to post:

It all boils down to training the users. Since this takes time, many IT departments don't want to do it, so I don't blame the end-user, meaning the store clerk for this mess. The blame should go back to the IT department for not enforcing secure logins and passwords on the systems. If the IT group allows passwords such as Password1234, or 12345678, especially from remote logins, well shame on them and the company!