There was a building site next to our office and I stood at the window and watched the workers. A colleague walked up next to me. We stood there in silence for a while.
Me: “Sometimes I wonder if I should just fuck it all and become a gardener.”
Him: “Me too.”
Me: “I’m serious.”
Him: “Me too.”
We briefly looked at each other with expressionless faces. In silence we watched some more. Then we went to the next meeting.
True story™.
Then again, there’s not much point to super long passwords. They’ll be turned into hashes, commonly of 128, 196, or 256 bits length. When brute forcing, by a certain length, it’s pretty much guaranteed there’s a shorter combination computing to the same hash. And an attacker doesn’t need your password, just some password that computes to the same hash. With 256 bit hashes a password with 1000 characters isn’t more secure than one with 15 in any meaningful way.