It seems to me that the requirements on the type of password are getting insane with some systems.
We use a gateway portal for management between agencies, and the password must change every month, and can't be a previously used password.
It must also contain 2 uppercase letters, a symbol, a number, and not more than 3 letters of your name. The system has the audacity to say "Choose a memorable password".
After about a year of using it, I went to do the usual change of the password and it reckoned: MoonpiGeonFace94##B was too easy, so 'Choose something more unique' whilst telling me my choice was poor. Now my password looks like 'sduofgihfijhaghhaiwehiuGFHJD~*£$%^&*7'. which lets face it, slips right off the tongue.
Gone are the days of using my service number.
My Dad, lucky old guy has his same password after 9 or so years, and is equally as pathetic as 123456.
So one generation is a huge security risk, whilst the other is being driven to insanity with the great big Pa$$word conundrum!