This is why you let a computer choose. By doing that you end up forcing the attacker to brute force, which we all know is mathematically unfeasible given enough entropy.