[jesseb]

At work I constantly deal with people who can't remember passwords as short as 8 characters, you have to remember we're not representative of the average person.

[keymone]

you should ask them what they prefer - remembering 8 random characters or 4 random words