And if you know the first character of a two character password, it's trivial to brute force the second, and so on...