Password strength is irrelevant as long as you avoid stupid ones like "n0m3nc1atur3". The system is the weak link in most situations of hacking.
And for those people using internet banking and doing online purchases ...... Don;t be careless about personal details like name, passport number, address, DOB, etc. Using these little pieces of info, it is possible to fool a bank operator to gain access to someone's account, and from there, wreck untold havoc.