More and more we work on our password attack use upper case, use lower case, use symbols, use numbers, don't use dictionary words and on and on. How much is enough to cover your assets and keep you out of trouble? Good page to get the jest of it is GRC's*|*Password Haystacks: How Well Hidden is Your Needle?** Steve has a way of boiling it down so we can understand it but short story is make it easy to remember but make it long. Password cracking is not like hand grenades close doesn't count the guess is either right or wrong. It's better to use 3 dictionary words padded out with something extra than to use chatter that you can't remember so you use something shorter.