Re: Obligatory xkcd reference
Adding uppercase, numbers and other characters to "correct horse battery staple" increases the entropy even further, though. Even just adding caps and common substitutions adds 4 bits per word, meaning 60 bits of entropy instead of 44.
260 is 36,533,877 years at 1000 guesses per second, rather than 550 years for a "mere" 44 bits of entropy.
Using multiple words is (as demonstrated) far more effective than a single word, but you should always be using multiple character types if you want to maximise entropy on a password ;)
Biting the hand that feeds IT
