Firstly: I understand that, if a hacker already has your Password, he/she is into your Account without a problem.
However, what I don't understand is.
Why the need for a Complex Password?
They say that the Hacker's Computer can try billions of Passwords until it alights on yours and then it can access your PC.
Excuse me, but am I being too simplistic in suggesting a limit to the number of attempts at a Password. Would not that particular Hacking problem go away if the Account was locked after 10 attempts and then simply unlocked 1 hour later. No need for any complicated procedure or new Password.
Just lock the Account for an hour, or maybe two, and then re-open it with the same Password.
"They say that the Hacker's Computer can try billions of Passwords until it alights on yours and then it can access your PC."
Yes, that's true but the hacker will have a very long wait to crack a complex password. According to this site, one of the passwords I use (which is just eleven characters and easy for me to remember) would take a desktop PC four thousand years to crack.
Until websites and and other online services roll-out Eddie's suggestion of limiting the number of password attempts the best thing we can do is to use a strong password.
By the way, as mentioned by VCR, FE's suggestion won't work on anything below the Pro versions of Windows.
Secret Squirrel, ref the site you have linked to, if I enter my password then it will not take them four thousand years to find it out. Maybe I am missing something here but a site that asks for your password in order to check its security seems to be somewhat suspect to me.