I feel like its almost obligatory to mention this xkcd "comic" when discussing password complexity.

https://xkcd.com/936/