said by Fleeced:
If you want a "secure" password, complexity > Length. Using Upper AND lower case, numbers and symbols is always better than just a "long password".
There have been some rather compelling arguments against that line of thought (relatively) recently:
and another good, but much more long-winded article: