I've also been doing this for years, but with bits of my post code thrown in to fulfil those edqe cases where complexity requirements are needed.

... random combinations of bike bits plus a greater London post code. Give me enough monkeys and typewriters and I could take you ;)

nah, my typos will laways protect me

+1 (TM now I guess)

You could have four word phrases that are maybe only ~12 characters, which if there are only alphabetical characters in the password, are still very much crackable via GPU brute force (http://mytechencounters.wordpress.com/2011/04/03/gpu-passwor...)