Good!
But there is another method of cracking passwords and is more effective
'Brute Force'. It takes time but shows results ...

So there is no way out to remain protected on simple sites that does not have brute force protection..

Bzupages has brute force protection . eg: when anyone tries to use brute force (only 5 tries of login) it automaticaly blocks login requests from that PC (IP) for 15 days...