An attacker would still be able to brute-force the password in a split-second. Besides, if you're using the same one-character password for multiple systems, t

An attacker would still be able to brute-force the password in a split-second. Besides, if you're using the same one-character password for multiple systems, the password can easily be deduced on a system that only uses hashing (or a weak form of salting), and an attacker can use that password to access accounts on stronger systems.