This isn't the worst I've seen... |
I admit they make them really hard to guess, but whoever uses passwords that are "guessable" deserve to be hacked in the first place.
It's really easy to come up with a password that is only letters and that sticks to your head.
heymanitsmeletmein -> Secure, easy to forget, hard to guess, hard to find by brute force.
Randy22# -> Hard to remember, although secure online, easy to crack by brute force if it's a local file.
What's more, websites advise you to never repeat a password. So if I'm signed up to half a dozen forums, three email services, online banking, two gaming portals and wikipedia, how many upper-lower-case-number-and-symbol passwords can I remember before I forget one and have to go through the process of "recover your password" just to forget that one the next day as well?
Passwords should be whatever you want, and as such, at your own risk if they are too easy to guess. If you use your dog's name as the key to your important stuff, then it's your fault for being stupid when some guy signs in and starts sending spam to all your contacts.
I finish my rant with the classic XKCD strip that wraps it all up perfectly: