Using multiple words or even sentences as password (as described in the article) doesn't even work always, there are too many websites or application which have

Using multiple words or even sentences as password (as described in the article) doesn't even work always, there are too many websites or application which have a password length limit. I recommend to use a password manager, KeePass is quite good. Good password manager should be able to easily generate a new strong and complex password every time. Remembering only one password and getting rid of the laziness of choosing always the same password is another advantage too. Even if a website that stored your password in clear text and someone hacks the website, you shouldn't have to worry about other applications or services you may have used with the same password. My personal rule is to choose unique strong passwords (alphanumeric and symbols) with at least 9 chars. Brute forcing a password with 8 chars was with my 5870 no big deal at all, but cracking a password with 9 chars is too expensive (ec2 gpu) or takes to long for the usual hacker. If someone really brute forces my password, with gpu and a cluster support, damn, than he really deserve it. But that's just my two cents.