They are not as easy to generate or a secure as it is often made out.
http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-of-your-passwords/3/
So worth ramping up the password strength where it matters.
The 2 factor authorisation may be better (for a while!).
As Sergeant Phil Esterhaus of Hill Street Blues would have said: “Let's be careful out there”
