If you can actually bruteforce a good password, there's a real problem here.