Overly complex requirements can be detrimental too
I have a number of complex passwords that I use for various things, but none of mine met the requirements of one company. This forced me to think of something new and utterly unmemorable. So of course I would need to write it down. To make the point I printed my password out on A3 sheets and stuck it to the office wall, knowing that the company's FAE visited us weekly and would see it, and hopefully take the hint that their requirements were actually lowering their security.