Problem is, if you look at 10+ chars only the list of 100k (even 1m) most common passwords is.. TINY. tiny. Common = short.