In reply to Vanessa Anne Blaylock.

Even a fairly weak password will be sufficient in that scenario, but if someone manages to gain access to your database somehow, then they will be able to do a local brute forcing attack.