And then you eventually run into the plethora of web apps which will not allow spaces, require some combination of capitals or numbers, or tell you that your password can't possibly be that long... and then we're back to square one.