What is you standard password? Try it with some variation on the front and end. Everyone has some default password if they don't intend to note passwords.
I read somewhere that if you add a capital letter (even only one) it immediately makes the password so much harder to guess, because usually people check the lowercase passwords first. Also characters like these !@#$%^&*() are great because those aren't commonly used as well. A 6 letter password, with no uppercase, I could bruteforce in an hour with a simple php script I made.