how long should a password be?

[Matt Kinni]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Everyone says it should be as long as possible, but there comes a point
where it's just impossible to remember anything longer than 20
characters.  What do you think?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBCAAGBQJIHrS5AAoJELlJAlPUfypQZ+YIALg0rP9o8TmF426DqWq3NZpD
rxbaGmv0cqRS9x9puU3sYTcNnRtoau8LeLh8NvyxskMBXyZbdcFUDTJCybCuAImf
1DCCjIF8ifz3QiTVQy5UIyGS9yRjdrtcTa31QPYGrqr4e7cl6/LDqsJPlpoJV4b4
MH1R9RETuaPBVmqFFS0Rysox3NAmt4z+a5Q4qRtPoPT/cRU48SsX378YvtWrko/j
Tt3V+KifWYjt/ASBS8B7z15gA7JLOoQxqu4deAOmFaqYPG/B3JZ3jWqFwXMcI20e
3vf2a97b+Ad7LAXLeCQyyT3z/HSUbMUeBKAGCNgaYxKp/JAJLXa1LeDIXQyyT7E=
=V6UQ
-----END PGP SIGNATURE-----