The Great Debates: Pass Phrases vs. Passwords. Part 1 of 3: Security Management - October 2004: "Second, you need to understand the difference between password guessing
and password cracking. Password guessing is when someone sits at the
console or at a remote machine trying passwords. Guessing is not
relevant to this article, because if an account has a relatively
complex password, guessing will not succeed anyway. If guessing
succeeds, the cause is either incredible luck on the part of the
attacker, or a weak password."
cool stuff. Use passphrases for security. Better yet, use password manager to create and store them.