No, you don’t have to. But we highly recommend it. Even one compromised password in your environment is a security risk.