The problem with long passwords and "culture fit employees" is at a former employer root passwords were mostly never used (magic of sudo, kerberos, etc) and wer

The problem with long passwords and "culture fit employees" is at a former employer root passwords were mostly never used (magic of sudo, kerberos, etc) and were stored in sealed envelopes in a semi-secured lockbox, and during the inevitable outage it was comically discovered two star trek fans configured two machines to the same trek quote as a password. I would imagine in the "real world" outside strict culture fit requirements that a certain percentage of passwords will be popular bible verses, for example. There's a curve where the likelihood of collision or predictability is very high with short passwords and it declines with length until it starts increasing again. I used to use full engineering parts numbers of semiconductors I used in projects. I also used some verbose API names that I used a lot. In retrospect that's a terrible idea. I wonder how many people sitting next to me used the same password.