[Bobboau]

That assumes someone is seriously trying to break into your account. For your typical user's typical account, a password that can withstand a few random guesses typed in manually is good enough; beyond that it's overkill. But if your account is DEADLY SRS SECRT stuff then yes, pick a DEADLY SRS HARD2CRK password.

and don't give it to British tabloids.

[Dragon]

For things you don't really care about, just about any password with some simple number at the end will do. As long as it's not painfully obvious, it isn't easy to guess a random three digit number.

QFT.  Also, 10:1 there is an automated password reset on their website that our crispy reptilian friend here hasn't found.

Lesson 1:  If using ISPs email service, don't have a ****ty ISP.
Lesson 2:  GMail is free.

He said it's something his-uncle's-work-related, so this might be the problem. This account might belong to the company (it does raise other a couple of questions, but whatever).