

Or am I missing the point, and it's just about not using dictionary words, or something else?

Is Randall Munroe right about passwords in today's xkcd ? Are very long (all lower case) plain text passwords more secure than short ones using a mix of numerals and upper/lower case text?