My last password (now changed everywhere it was used) was "I once had a giraffe named Benjee. He was a mightily large fellow!"

Happily, nothing ever said "maximum length exceeded" when I registered that. I think, like our move away from IE6, the short password days are mostly over.