These are the password tags:
passwords x 730
password-management x 127
password-recovery x 90
password-protection x 52
password-generation x 11
password-prompts x 4
Do we really need all of them? I feel like they're too specific and I don't think we need so many tags for password related questions. I think we can merge / remove some of them. What do you think?
On [security.se], there's passwords, password-management and password-policy. Password policy is more of an administrator subject.
Password generation goes hand in hand with password choices which are usually asked with passwords, so I suggest merging that one.
password-protection is a bit of a mess, as it covers password storage (preventing others from obtaining your password), setting something to be password-protected (confidentiality?), and coping with a feature that includes a password protection (→ authentication). It needs manual cleanup.
password-recovery is a separate concept worth keeping.
I removed password-prompts for the time being. I agree with @slhck, passwords could be improved.
[passwords]is too unspecific. Password management, recovery and protection definitely deserve their own tags, IMO.