Suppose that you are a cryptographer $($someone who designs or decodes encryption data for online storage$)$ for a company that streams movies to subscribers.

Subscribers each have an online account and your company has noticed an increase in the number of accounts being hacked into each month. As a result, they are asking you how to most efficiently improve their minimum password strength.

Hackers try accessing accounts by using programs that test password permutations at incredible speeds. To put into yrerspective how fast this can be done, an account with a password that is $9$ characters long and only uses lowercase letters can be accessed in about $2$ minutes.

This is a big reason why some websites will give you a limited number of attempts to log$-$in and then lock your account if you cannot log$-$in within those number of attempts, in case a hacker is trying to use a program to access your account!