" times less secure" isn't really well defined. Entropy is usually measured in log-space.

And in practice, it's less than one bit, since not all characters are letters.