The problem with crazily-complex passwords is that if you can't remember them you write them down, and, at a stroke, have compromised security. One of the worst I've encountered is the U.S. Customs eAPIS web site, for sending advance information when you want to fly a private plane or sail a private boat to the U.S.
The other issue is that you risk locking out legitimate access.
My bank does the password plus security question thing. My security questions (you can make up your own)
are more than a little interesting.