I create an entry in a password manager and just copy/paste from there.
Protip: when you do that, make sure the password field you're copy/pasting into is not shorter than the password (input's maxlength property).
I use more than 20 characters with upper-case/lower-case/special-characters etc.
I'm pretty sure you'll manage to open the wallet if you only use the first 20 characters or whatever password you set.
I can see how people generating pw's is normal, so I'm raising the limit. Is 32 chars enough or should I not stop below 100? :-)
Do you have any restrictions on what a person can use as a password?
No. Reason: the wallet starts with no-password for simplicity, so anything you set should be better.
That's okay. I don't trust online wallets... except ones like blockchain.info/wallet which doesn't store the private keys on their server.
I think you misunderstand how it works. In short: I don't store the user's private keys on the server (neither the system wallet's key).
This is all very irrelevant by the way (or should i say there are a dozen things that are a lot more important security wise).
No offense, but how do we know you aren't just creating a hacker database with those passwords cross-referenced to the aliases, names, email addresses
"Hacker databases" are created everywhere automatically by users who re-use their passwords. Take your concern to them.
How do we know you won't just run away with the BTC that people deposit at your wallet?
How do you know blockchain.info won't just run away with the BTC?
Reminder: I suggested the free bitcoin (faucet) functionality, I never asked anyone to use the wallet part. The wallet's primary purpose is to receive the coins you get from the faucet and BitBack.