Passwords are possibly the worst user authentication solution; they can be stolen, forgotten or guessed. Yet, they remain a widely used and very popular authentication means. Dashlane conducted a research looking into practices of over 40 popular sites and produced a password power ranking table:
Source and full article at heplnetsecurity.com. BU-CERT advice on strong passwords here.