I am currently using 9 digit numbers to authenticate writers on two apps. In the first app, this unlocks editing tools for use in making content rich dhtml documents which are stored on the local machine by default. With the second app, it opens up create/edit/delete functionality for content items (meant for low security, non-personal content) stored in a DB. But in this app all changes are versioned, so in the case of a malicious user it is just a question or reverting to the previous good version.
To summarize, I'm using weak credentials for access to limited functionality to two apps meant to be used with fairly open & shared information. And my credential system could always be hardened sometime down the road as the app requirements warrant.
So my question is for those with deep knowledge and experience in computer security: Is this a mistake? What is there to look out for that I'm probably not aware of? Am I going to regret not using stronger credentials later on?