Today’s XKCD comic is too true and it seems to be based on this research paper, The True Cost of Unusable Password Policies: Password Use in the Wild.
Unfortunately, I now wonder how many people will set their password to ‘correcthorsebatterystaple‘.