That's excessive. Around 80 bits of entropy (16 alphanumericals) is sufficient, especially when using unique passwords for each service. See https://security.stackexchange.com/questions/6095/xkcd-936-s...