@mangymagi

@Tutanota While that is possible it is unlikely. Anyone sane doing these checks will have 10,000 or more common passwords they check first before they start the random search. And they will likely do their random search with shorter combinations as well. In fact if they don't know the length of your password (which no sane password storage will give you) they probably won't even try if your password is long because the odds of them ever getting it are too low to bother.