There are multiple vectors of attack against passwords (including shoulder surfing, network sniffing, brute force, re-use, etc.). Using very long/complex passwords - allied to a limited number of permitted failed logins - will go some way to redressing brute force attacks, although most hackers...