Could someone explain why password length is so important when logging into web services? I get that it's important for encryption, but when you implement a web

Could someone explain why password length is so important when logging into web services? I get that it's important for encryption, but when you implement a web service that has rate limiting, a basic password length of say six characters should be sufficient, no?