Absolutely true for regular passwords. In the specific case of the blog post, it can work however, because it's just the numeric two-factor part.