That's definitely an option, increasing the password length to 24-character passwords or something like that.
