my password for school has to be 15+ characters, have at least one number and one upper case letter. it has to be changed every 3 months. it definitely makes them less secure PW's. i usually just use a random sentence (usually with one word not in english, or any language) with one of the letters capitalized and a number at the end.