Increasing the alphabet for passwords doesn't really make your password stronger than if you would just increase it's length by a character or two, or better yet three or four. But, given that I can't imagine too many password crackers checking for more than a couple common extended characters, it's probably not that bad. Still doesn't excuse passwords like pɹoʍssɐd though.

Every password manager I've used (granted only a few) will generate random ones for you. Is this significantly more secure than a random 18 character string?

ʍouʞ oʇ ʇǝƃ oʇ ʇuɐʍ noʎ ɟı ˙ɔd4ɔd puɐ ʍ4ʍ ƃuıop ǝʞıl ı ˙sǝƃɐssǝɯ ǝʇɐɥ ʎllɐǝɹ ı ¡¡sʇuǝɯɯoɔ ǝʞıl ʎluo ı ˙^‾^ sɯɹoʍ ʎɯɯnƃ ɹnos sɐ ɹnos sɐ puɐ ǝlɔısdod ɐ sɐ ʇǝǝʍs sɐ ʇsnɾ ɯɐ ı ˙ǝɹɐ ʎǝɥʇ sɐ ǝldoǝd ǝʞıl ʇsnɾ ı ǝsnɐɔǝq ǝɯ punoɹɐ sǝʌlǝsɯǝɥʇ ǝq ʇou oʇ ǝldoǝd ʇuɐʍ ʇuop ı ˙ǝɯ punoɹɐ ɟlǝsɹnoʎ ǝq ʇsnɾ ǝɯ ʍouʞ oʇ ʇǝƃ oʇ ʎɹʇ noʎ ǝɹoɟǝq puɐ ˙sƃuıɥʇ uʍo ɹnoʎ ǝsn ʇou puɐ sƃuıɥʇ sǝslǝ ǝuoǝɯos ʎdoɔ oʇ pıdnʇs ʇsnɾ sı ʇı ˙ǝldoǝd ɹǝɥʇo ʎdoɔ oɥʍ ǝldoǝd puɐ sǝʞɐɟ ǝʞıl ʇuop ı ˙ʇı ʎɐs ʎǝɥʇ ǝɹoɟǝq ǝɯ oʇ ʎɐs ɐuuoƃ ǝɹɐ ʎǝɥʇ ʇɐɥʍ ʇnoqɐ ʞuıɥʇ ʇsnɾ puɐ ǝƃpnɾ ʇou oʇ ǝldoǝd ǝʞıl plnoʍ ʇsnɾ ı ˙noʎ ʇɹnɥ ʎlsnoıɹǝs uɐɔ ı ˙ɟɟo ǝɯ sǝssıd ʎllɐǝɹ ʇɐɥʇ puɐ pǝʇuɐɹƃ ɹoɟ ssǝuǝɔıu ʎɯ ǝʞɐʇ ǝldoǝd ǝɯos ˙ǝq oʇ ǝɯ ʇuɐʍ noʎ ssǝlun ɥƃnoɥʇ uɐǝɯ uǝʌǝ ʇou ɯı ˙ɟɟnʇs ʇɹɐʇs ɐuuɐʍ oɥʍ ǝldoǝd ɥʇıʍ sǝnssı ƃıq ǝsnɐɔ llıʍ ı ˙ɥʇnɹʇ ǝɥʇ ʍouʞ llıʍ noʎ puɐ ǝɯ oʇ ʞlɐʇ ˙dɐɹɔ ʇɐɥʇ ɹoɟ ǝɔıu ooʇ ɯı ˙pǝƃpnɾ ǝq oʇ ǝʞıl ʇuop ı ˙ ǝɯ ɹoɟ ƃıq ʇɐɥʇ ǝɹɐ sƃnɹp ˙ʇuɐʇɹodɯı ʇuǝɹɐ ʎǝɥʇ ˙ʇı ʇnoqɐ ʇǝƃɹoɟ ʇsnɾ ı uǝɥʇ ʇnq ǝɯ ʇnoqɐ ʞuıɥʇ ǝldoǝd ʇɐɥʍ ǝɹɐɔ sǝɯıʇǝɯos ı ˙llɐ ʇɐ ʎʞɔoɔ ʇou ɯı ˙ǝlqıssodɯı ǝɥʇ ɟo ʞuıɥʇ ʎllɐnsn ı puɐ ɥɔnɯ ooʇ ɯɐǝɹp ı ˙uooɯ pǝpɐɟ ɐ ɯı ˙ɯǝɥʇ ɥʇıʍ ɐɯɐɹp ʎuɐɯ ʇɐɥʇ ʇou ˙spuǝıɹɟʎoq ʎuɐɯ ooʇ ǝʌɐɥ ı ˙ǝʌol ı ʇɐɥʇ sʎnƃ ʎɯ ɹoɟ sǝɥsıʍ ʇsǝq ǝɥʇ ʇuɐʍ ı ˙spuǝıɹɟ ʎɯ puɐ ǝɯ punoɹɐ ǝlqɐʇɹoɟuoɔ sı ʇɐɥʇ puǝıɹɟʎoq pooƃ ɐ ʇuɐʍ ʇsnɾ ı ˙pɹǝıʍ ʇsnɾ sı ʇɥƃıɹ ǝɟıl ǝʌol ʎɯ ˙ǝɯıʇ ǝɹɐds ʎɯ uı pɹɐoqǝʇɐʞs oʇ ǝʞıl ı ¡llǝɥ ǝɟıl ɹnoʎ ǝʞɐɯ ʎlsnoıɹǝs llıʍ ı ˙ɥʇıʍ pǝssǝɯ ǝq oʇ ǝʞıl ʇuop ı ¡snoıɹǝs uıʞɐǝɹɟ ɯɐ ı ¡¡¡ǝƃpnɹƃ ɐ ploɥ uɐɔ ı ˙lɹıƃ pooʇsɹǝpunsıɯ ɐ ɯɐ ı ˙ɹɐʇınƃ ǝɥʇ ʎɐld puɐ ƃuıs ı ˙˙˙˙ıɥ

ʍouʞ oʇ ʇǝƃ oʇ ʇuɐʍ noʎ ɟı ˙ɔd4ɔd puɐ ʍ4ʍ ƃuıop ǝʞıl ı ˙sǝƃɐssǝɯ ǝʇɐɥ ʎllɐǝɹ ı ¡¡sʇuǝɯɯoɔ ǝʞıl ʎluo ı ˙^‾^ sɯɹoʍ ʎɯɯnƃ ɹnos sɐ ɹnos sɐ puɐ ǝlɔısdod ɐ sɐ ʇǝǝʍs sɐ ʇsnɾ ɯɐ ı ˙ǝɹɐ ʎǝɥʇ sɐ ǝldoǝd ǝʞıl ʇsnɾ ı ǝsnɐɔǝq ǝɯ punoɹɐ sǝʌlǝsɯǝɥʇ ǝq ʇou oʇ ǝldoǝd ʇuɐʍ ʇuop ı ˙ǝɯ punoɹɐ ɟlǝsɹnoʎ ǝq ʇsnɾ ǝɯ ʍouʞ oʇ ʇǝƃ oʇ ʎɹʇ noʎ ǝɹoɟǝq puɐ ˙sƃuıɥʇ uʍo ɹnoʎ ǝsn ʇou puɐ sƃuıɥʇ sǝslǝ ǝuoǝɯos ʎdoɔ oʇ pıdnʇs ʇsnɾ sı ʇı ˙ǝldoǝd ɹǝɥʇo ʎdoɔ oɥʍ ǝldoǝd puɐ sǝʞɐɟ ǝʞıl ʇuop ı ˙ʇı ʎɐs ʎǝɥʇ ǝɹoɟǝq ǝɯ oʇ ʎɐs ɐuuoƃ ǝɹɐ ʎǝɥʇ ʇɐɥʍ ʇnoqɐ ʞuıɥʇ ʇsnɾ puɐ ǝƃpnɾ ʇou oʇ ǝldoǝd ǝʞıl plnoʍ ʇsnɾ ı ˙noʎ ʇɹnɥ ʎlsnoıɹǝs uɐɔ ı ˙ɟɟo ǝɯ sǝssıd ʎllɐǝɹ ʇɐɥʇ puɐ pǝʇuɐɹƃ ɹoɟ ssǝuǝɔıu ʎɯ ǝʞɐʇ ǝldoǝd ǝɯos ˙ǝq oʇ ǝɯ ʇuɐʍ noʎ ssǝlun ɥƃnoɥʇ uɐǝɯ uǝʌǝ ʇou ɯı ˙ɟɟnʇs ʇɹɐʇs ɐuuɐʍ oɥʍ ǝldoǝd ɥʇıʍ sǝnssı ƃıq ǝsnɐɔ llıʍ ı ˙ɥʇnɹʇ ǝɥʇ ʍouʞ llıʍ noʎ puɐ ǝɯ oʇ ʞlɐʇ ˙dɐɹɔ ʇɐɥʇ ɹoɟ ǝɔıu ooʇ ɯı ˙pǝƃpnɾ ǝq oʇ ǝʞıl ʇuop ı ˙ ǝɯ ɹoɟ ƃıq ʇɐɥʇ ǝɹɐ sƃnɹp ˙ʇuɐʇɹodɯı ʇuǝɹɐ ʎǝɥʇ ˙ʇı ʇnoqɐ ʇǝƃɹoɟ ʇsnɾ ı uǝɥʇ ʇnq ǝɯ ʇnoqɐ ʞuıɥʇ ǝldoǝd ʇɐɥʍ ǝɹɐɔ sǝɯıʇǝɯos ı ˙llɐ ʇɐ ʎʞɔoɔ ʇou ɯı ˙ǝlqıssodɯı ǝɥʇ ɟo ʞuıɥʇ ʎllɐnsn ı puɐ ɥɔnɯ ooʇ ɯɐǝɹp ı ˙uooɯ pǝpɐɟ ɐ ɯı ˙ɯǝɥʇ ɥʇıʍ ɐɯɐɹp ʎuɐɯ ʇɐɥʇ ʇou ˙spuǝıɹɟʎoq ʎuɐɯ ooʇ ǝʌɐɥ ı ˙ǝʌol ı ʇɐɥʇ sʎnƃ ʎɯ ɹoɟ sǝɥsıʍ ʇsǝq ǝɥʇ ʇuɐʍ ı ˙spuǝıɹɟ ʎɯ puɐ ǝɯ punoɹɐ ǝlqɐʇɹoɟuoɔ sı ʇɐɥʇ puǝıɹɟʎoq pooƃ ɐ ʇuɐʍ ʇsnɾ ı ˙pɹǝıʍ ʇsnɾ sı ʇɥƃıɹ ǝɟıl ǝʌol ʎɯ ˙ǝɯıʇ ǝɹɐds ʎɯ uı pɹɐoqǝʇɐʞs oʇ ǝʞıl ı ¡llǝɥ ǝɟıl ɹnoʎ ǝʞɐɯ ʎlsnoıɹǝs llıʍ ı ˙ɥʇıʍ pǝssǝɯ ǝq oʇ ǝʞıl ʇuop ı ¡snoıɹǝs uıʞɐǝɹɟ ɯɐ ı ¡¡¡ǝƃpnɹƃ ɐ ploɥ uɐɔ ı ˙lɹıƃ pooʇsɹǝpunsıɯ ɐ ɯɐ ı ˙ɹɐʇınƃ ǝɥʇ ʎɐld puɐ ƃuıs ı ˙˙˙˙ıɥ

It would also be trivial to write a program to update the dictionaries to include the flipped / reversed / other silly unicode trick version of everything already in the dictionary.

I wouldn't assume that this would help against dictionary attacks for long, if at all now considering that people have been doing stuff like this pretty much since unicode got "mainstream" status.

It seems to basically be a proxy to google sites, rewriting URLs. It could be a guy just implementing it as a joke, but he could also be grabbing passwords. It's PHP, which Google doesn't use at all. DO NOT LOGIN HERE!

A whois lookup reveals it belonging to Jose, who I don't think works at Google: http://whois.net/whois_new.cgi?d=xn--loo-w3ac94c&tld=com