Looking at the table below it seems that complexity is often promoted as secure and it seems that length of password is somewhat underrated. Many web services force us to use upper+lower case letters and numbers, when a simple sentence is easy to remember and to all intents and purposes quite difficult to hack, that is , if long enough.