Did someone ever brute force your password or where does this fear come from? Lemmy probably has precautions against brute forcing. Most passwords get leaked from shitty databases, where the length does not matter.