The problem with passphrases is that MANY well known sites don't allow spaces in passwords (twitter for example - you would have thought they would know better). And the number of sites I've come across that won't let me use symbols in a password, or limit the password length to like 10 characters. I usually go for 20+ totally random characters/symbols using (the awesome) lastpass password generator, but it feels like the websites are against me. It's like they don't want us to be secure. Seriously - if I want to create a 256 character password then freaking let me (I know there will be collisions shorter than that).