8 char password actually is _NOT_ that hard to break by brute force. http://www.lockdown.co.uk/?pg=combi