When that happens, turn up the work factor on the hash.

And 64 is a pretty low limit if you want to use a passphrase.

"He who fights monsters will have to look into fighting scammers too" is both a decently difficult password to guess, pretty easy to remember and too long.