Recently I discovered method of generating passwords with Diceware/EFF dictionary.

Look at my example, *passphrase* vs *randomly generated password*:

1. `rockstar reword gamma banker unwarlike` (64,6 bits entropy)
2. `9zbhL=HyWNV` (65,7 bits entropy)

Both are considered as strong passwords.

1. is easy to type and remember. You can spell it to someone else.
2. is opposite: hard to type and remember, impossible to pronounce.

Password managers deals with typing difficult passwords.  

But in the absence of password manager software at the workstation or in other circumstances where PM can't be used (login screen, decrypting system drive), passphrase is better.

I am curious:

1. Should I create all my passwords with Diceware/EFF dictionary and only fallback to random characters if password policy forces me to include special characters and upper/lower case symbols?
2. Why in IT systems we still use randomly generated gibberish when we could use words?