Agreed. What makes a password secure is the uncertainties surrounding it. The characters that comprise it and the length should be as freeform as possible. Then hackers can't make any assumptions.

This is in fact how password generation is implemented in KEYBOX ( http://www.jayfuerstenberg.com/keybox/ ). The only problem is some sites don't always accept the passwords KEYBOX generates for you.