So if the message containing the password is intercepted, an attacker now has a very small dictionary to use to gain access to all of your accounts tied to hopr

So if the message containing the password is intercepted, an attacker now has a very small dictionary to use to gain access to all of your accounts tied to hopr? Color me skeptical.