Our company recently did a password audit, it was found that an employee was using the following password:
“VaderObiwanLukeBobafettGandalfFrodoGimliLegolasSacramento”

When asked why he had such a long password, he rolled his eyes and said: Hello! It has to be at least 8 characters and include at least one capital.”