As a general rule, any password that is human-chosen is weak. Users should be encouraged to only use a competent software program (recommendations would be nice) to generate their passphrase.