I hope people don't follow this advice and use a small subset of memorable passphrases across many, many sites. There are countless examples of incompetent appl

I hope people don't follow this advice and use a small subset of memorable passphrases across many, many sites. There are countless examples of incompetent application developers recording passwords insecurely (once hacked, your login/pw is now easily testable against other sites). You should use a long passphrase (like Randall is talking about) with a password manager that can manage ~500 equally difficult passwords.