The one issue I haven't seen addressed in any of these password posts is that many sites/services (like my corporate login, for example) require you to use both numbers and capitalization. So what I've started doing is using the same 3 word combo with l33t substitutions, capitalization and punctuation and the first n (like I'm telling you guys) letteres from the service I'm logging into added to the end.