This is a really cool tool to test how good your password would hold up to a brute-force attack:

https://www.grc.com/haystack.htm

Also, this sums things up: