Today I learned that passphrases are weak and need to be longer and / or should require numbers or symbols.