[RugnirViking]

This. The siren song of "oh but increasing the number of characters makes brute forcing harder exponentially" is defeated in practice by the fact that everybody's password is following a few predictable patterns. You know what else increases the complexity exponentially? Longer passwords

[bitexploder]

You know what else increases the odds you can’t brute force it? Not having one :)

Seriously though, the best password boxes are one that have an entropy meter and check that your password has never been in a breach.