A recent Tribridge blog explains why many security researchers now recommend using 18-character alpha numeric, non-complex passwords.  Lengthy non-complex passwords may seem complicated but they can be easier to remember than complex passwords.  Use a familiar phrase or sentence. Using familiar phrases as passwords can even reduce the number of help desk calls for password resets.