They later say to use "passphrases", or a string of dictionaried words. This infographic is kind of hypocritical that way. Basically, there are hacking tools that use dictionaries, but in most cases, these tools prove to be less effective than brute force — unless your password is "cat".