For those who use diceware passwords: I once saw a service that capped passwords at 16 characters, only allowed letters and numbers (no spaces), and still had the temerity to claim that "insecure" passwords would not be allowed...