In my own case it is a combination of options one and three. Some passwords demand inconvenient (but probably quite efficient) criteria. Must be so many characters, must be a combination of letters and numbers, must be between so many and so many characters, must include an extended set character, must include at least one capital and one lower case, and various combinations of these.