Hands on experience you have a computer in front of you, start breaking it.
A password-cracking expert has unveiled a computer cluster that can cycle through as many as 350 billion guesses per second. It's an almost unprecedented speed that can try every possible Windows passcode in the typical enterprise in less than six hours.
Wow that is a monster. So is the answer to use longer passwords or not worry about it because we have set our password lockout limits to something like 10 tries?