This question already has an answer here:
I've recently enabled 2-factor auth on a number of web apps, mostly using Google Authenticator. Does this mean that the importance of a strong password on each site is reduced? I would prefer to use passwords that are easy to type on a mobile device, if that doesn't compromise security too much.
My particular need for wanting to shorten/simplify passwords is about the time it takes to enter punctuation on a tablet/phone - 3 taps (, !, ), and 2 for a capital letter. From these answers, I'm thinking a better approach would be a longer password consisting only of lowercase and numbers, possibly with repeated letters. (Jamming 'kkkkk' on the end of a password would probably make it a fair bit stronger, while being very quick to enter.)
[note: I originally posted this to Superuser as the blurb for this site says it's for "information security professionals"]