Comment by Woberto

It seems like to protect against this, I should have a long password and not use words (e.g. mix numbers for letters). Is that correct?