The passwords are usually stored as cryptographic hashes and it’s not clear what they’re selling, those hashes or brute-forced password. Any way one has to use the complicated passwords part of which is taken from HW security keys and having at least 256 bit entropy. More on that is
in that topic.