I've been using nicwolff's random password generator for about a year now. Works great.

I dunno. Are words easier to hack/guess than strings of numbers?

*tries out 'virtuous' as Jo Beese's password in various places*

The password for my computer is G9/>o0*r6q{Y. I think that's pretty secure.

My co-worker managed to type his corporate password into one of our company IRC channels a few weeks ago. He wasn't paying attention and had the wrong window in focus. His office is next door to mine and as soon as I saw what obviously was a password show up in XChat, I hear, "God Dammit!" from his office. He lost a good 1/2 hour of productivity that day while he went and changed his password on all the company systems.

I use a few different passwords that are reasonably secure (non-dictionary words, numbers that are not my birthdate) but someone with enough motivation could probably hack them.

Of course, that person would be very depressed at what they found. The boringness of my life is my best protection.

Systems. I'm telling y'all, get a system. Mine's rather daft, I have my own special version* of l33t-spelling and I sign up to all sites with sitename@a-domain-i-own** - so basically I can log in anywhere with "sitesname" and "sitesname@mydomain" but of course it's more like "51732n3m3" ... Anyway, I don't forget my passwords easily, even at sites I rarely visit, and more than once have I found a site and thought "Did I ever sign up here" and tried my combo, and presto, yes I did.

* it is indeed a special version of l33t spelling, I have to be able to add å ä ö to it, and I have assigned numbers to each, so it makes no sense to anyone but me.

** note that I'm not telling you which one.

My bank told me not to talk to 'friendly strangers' on the internet about my passwords.
And I won't get into your car either.

Exactly what grapefruitmoon said.

I am amazed by "friend-finding" gadgets on social sites that ask me to provide them my email address and password so it can go root around there. People do this? Really?

Yes. They do. I have a "add your twitter account" thing on adland, and a password is not required for this but there's a field for password, yaknow, if ya feel like it. (it even says "not required")

80% feel like adding their password. Kinda stuns me.

Mine are so secure, even I don't know what they are sometimes.