> GRC Password Haystacks ...
The tools that estimate password strength are ... crap.
According to one popular password strength meter, BandGeek2014 should
take 74+ centuries to crack; another estimated six [6] years. Big spread, eh?
Reality: Hashcat cracked it in less than 90 minutes.