I turned this on for registered users following the data mining that took place. To ensure everyone changed their passwords

I'm inclined to leave it enabled to help try and keep the site secure.