To my knowledge a strong password, which is proteced against even freeware password breaker software should be at least 15 characters long and actually there is not much advantage if uppercase and lowercase characters are mixed with special characters in pw:s. So I think this should be mentioned currently every time passwords are an issue.