It doesn't have to be a good password to last a long time. Security measures should be commensurate with the risk of loss.

Just like I don't put my spare change in a crack-proof safe; I hate it when websites require super secure passwords to access information that I wouldn't mind leaving on my desk for every passerby to see.