So I figured I'd go read what's ‘password spraying’ that you mention: > Password spray is the opposite of brute-forcing. Adversaries acquire a list of accounts

So I figured I'd go read what's ‘password spraying’ that you mention: > Password spray is the opposite of brute-forcing. Adversaries acquire a list of accounts and attempt to sign into all of them using a small subset of the most popular, or most likely, passwords. (https://www.microsoft.com/security/blog/2020/04/23/protecting-organization-password-spray-attacks/ https://www.microsoft.com/security/blog/2020/04/23/protectin...) Are you saying that your fifty-character passwords are common ones?