> if I use "aaaaaaaaa" as a password on a website I know full well what I'm doing. There's no substitute for length. "dog" is a bad password. "dooooooooooooooo

> if I use "aaaaaaaaa" as a password on a website I know full well what I'm doing. There's no substitute for length. "dog" is a bad password. "doooooooooooooooog" is much better. The entropy is still the same, but the latter takes much longer to brute force and is just as easy to remember. Of course one should not use passwords one can remember for anything critical, but many passwords are for services where compromise is not a big deal.