When testing these kind of experiments I always use a similar password (with similar structure, completely different components and order of components)