This article talks about the the time it takes to do a “brute force” attack on a password, and notes that short passwords can be compromised in seconds in specific types of password attacks. In general, the longer the better, especially when adding numbers and punctuation to the password.