My bank insisting on a hard-to-remember 8 character password isn't make it more secure than letting me pick a longer passphrase.