Maybe 40 character long passwords are far overkill. It would probably take 9,000 qntn years.