I get annoyed when websites say something like, ´Using a password of this strength will take a a hacker one million years to brute force.´
No, it’ll take a million years to try every combination and permutation of allowed characters. Chances are your password will be tried much sooner than that.
Don’t forget looking around the office to find a clue as to what the password is. It’s either the dog’s name or the owner’s favourite baseball player.