Really, that seems a bit excessive. I'd think anything over 20 uncrackable by brute force provided you utilized all character types (alphanumeric and punctuation).
for a good many things, you may be correct, but damned if I'm going to let my ssh server, router, or anything else that is remote-accessed have anything short of 45 characters.
I could show you my log files for before I implemented Fail2Ban to show you why I'd never go with such weak things ever again for anything I own that's web-accessible.
Also, as Nami mentioned, since I already have it all done for me, I might as well max everything out.
... I always find it funny that some of my weakest passwords (from a brute-force standpoint) are for my financial stuff, since those sites limit me to 20 characters